JACOBIANS IN ISOGENY CLASSES OF ABELIAN SURFACES 

OVER FINITE FIELDS 
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Abstract. We give a complete answer to the question of which polynomials 
occur as the characteristic polynomials of Frobenius for genus-2 curves over 
finite fields. 



1. Introduction 

The Weil polynomial of an abclian variety over a finite field ¥ q is the charac- 
teristic polynomial of its Frobenius endomorphism; the Weil polynomial of a curve 
over ¥ q is the Weil polynomial of its Jacobian. In this paper we determine which 
polynomials occur as the Weil polynomials of genus-2 curves over a finite field. 

Weil's 'Riemann Hypothesis' shows that the Weil polynomial of an abelian sur- 
face over ¥ q has the form 

x* + ax 3 + bx 2 + aqx + q 2 , 

and the Honda- Tate theorem [Tat 68] makes it a straightforward matter to determine 
which such polynomials come from abelian surfaces (see [Riic901 Thm. 1.1], |MN02| 
Thm. 2.9], and the Appendix to this paper). Since two abelian varieties over ¥ q are 
isogenous to one another if and only if they have the same Weil polynomial |Tat66j , 
we may phrase our main question as follows. 

Question 1.1. Suppose f = x* + ax 3 + bx 2 + aqx + q 2 is the Weil polynomial for 
an isogeny class of abelian surfaces over ¥ q . Is there a projective smooth genus-2 
curve over ¥ q whose Weil polynomial is equal to f? 

While this question has been settled in many special cases (as we explain in 
detail below), until now there have been two kinds of isogeny classes for which 
the question has remained largely unanswered: the split isogeny classes and the 
supersingular isogeny classes. We analyze these two remaining cases and provide a 
complete answer to Question 11.11 

Theorem 1.2. Let f = x 4 + ax 3 + bx 2 + aqx + q 2 be the Weil polynomial of an 
isogeny class A of abelian surfaces over ¥ q , where q is a power of a prime p. 

(1) Suppose that A contains a product of elliptic curves, so that f can be written 
as a product 

f = (x 2 — sx + q)(x 2 — tx + q) 
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p-rank of A 


Condition on p and q 


Conditions on s and £ 




— 


|* - t\ = 1 


2 




s = i and t 2 - 4g e {-3, -4, -7} 


q = 2 


|s| = |i| = 1 and s ^ t 


1 


q square 


s 2 = Aq and s — t squarefree 





p > 3 


s 2 + e 


p = 3 and q nonsquare 


s 2 = t 2 = 3q 


p = 3 and q square 


s — t is not divisible by 3^/q 


p = 2 


s 2 — t 2 is not divisible by 2q 


q = 2 or q = 3 


s = t 


q = 4 or q = 9 


s 2 =t 2 = Aq 



Table 1 . Conditions that ensure that the split isogeny class with 
Weil polynomial (x 2 — sx + q){x 2 — tx + q) does not contain a 
Jacobian. Here we assume that |s| > \t\. 



p-rank of A 


Condition on p and q 


Conditions on a and b 






a 2 — b = q and b < and 

all prime divisors of b are 1 mod 3 


2 




a = and & = 1 — 2q 




p>2 


a = and b = 2 — 2q 




p = 11 mod 12 and q square 


a = and 6 = — q 





p = 3 and q square 


a = and & = — q 




p = 2 and q nonsquare 


a = and 6 = — q 




q = 2 or q = 3 


a = and b = —2q 



Table 2. Conditions that ensure that the simple isogeny class 
with Weil polynomial x 4 + ax 3 + bx 2 + aqx + q 2 does not contain 
a Jacobian. 



where the two factors are the Weil polynomials of isogeny classes of elliptic 
curves over ¥ q and where we may assume that \s\ > \t\. Then A does not 
contain a Jacobian if and only if the conditions in one of the rows of Tabled 
are met. 

(2) Suppose that A is simple. Then A does not contain a Jacobian if and only 
if the conditions in one of the rows of Table [H are met. 

The analog of Question ll.ll for elliptic curves was answered by Water house [Wat69 , 
Thm. 4.1]. The generalization from elliptic curves to genus-2 curves is surely quite 
natural, but to the best of our knowledge Question 1 1.1 1 did not occur in print until 
1990, when Ruck [Ruc90 provided some sufficient conditions for a positive answer 
to the question. In the literature starting with Ruck we find a large variety of 
methods and techniques that provide both positive and negative answers to Ques- 
tion ll.ll for particular classes of Weil polynomials. Almost all of the positive results 
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are based on the following theorem of Weil; the version we give here is due to 
Gonzalez, Guardia, and Rotger GGR05, Thm. 3.1]. 

Theorem 1.3 (Weil). Let (A, A) be a principally polarized abelian surface defined 
over a field k. Then (A,X) is either 

(a) the polarized Jacobian of a genus-2 curve over k, 

(b) the product of two polarized elliptic curves over k, or 

(c) the restriction of scalars of a polarized elliptic curve over a quadratic ex- 
tension of k. 

Furthermore, these three possibilities are mutually exclusive. 

Let us say that an isogeny class of abelian varieties is principally polarizable if 
it contains a principally polarized variety. In light of Weil's theorem, if an isogeny 
class of abelian surfaces over F g is simple over F ? 2, then it contains a Jacobian if 
and only if it is principally polarizable. The problem of determining the principally 
polarizable isogeny classes of abelian varieties was studied by the first author in a 
series of papers |How95] , 1 tow96 , I lowl) 1 , where he expressed the obstruction to 
the existence of principal polarizations in terms of the vanishing of an element of 
a group constructed from the Grothendicck group of the category of finite group 
schemes that can be embedded in varieties in the isogeny class. Recall that an 
abelian surface over a field of characteristic p > is said to be ordinary when its 
p-rank is 2, mixed when its p-rank is 1, and super singular when its p-rank is 0; the 
p-rank of an abelian surface over a finite field can be read from the Newton polygon 
of the Weil polynomial in a well-known way. The principally polarizable isogeny 
classes of ordinary abelian surfaces over a finite field were determined in [How95( 
Thm. 1.3]. In [MN02 it was proved that all mixed isogeny classes over a finite field 
are principally polarizable by applying criteria developed in Tiow96 ; in particular, 
since the simple mixed classes are absolutely simple they always contain Jacobians. 
Finally, the supersingular case was worked out in HMNR06J using the ideas of 
How96] and [HowOlj . Gathering all these results one obtains: 

Theorem 1.4 ([HMNR06 ). Let A be an isogeny class of abelian surfaces over¥ q 
with Weil polynomial x A + ax 3 + bx 2 + aqx+q 2 . Then A is not principally polarizable 
if and only if the following three conditions are satisfied: 

(a) a 2 — b = q, 

(b) b < 0, and 

(c) all prime divisors of b are congruent to 1 modulo 3. 

This result, together with Weil's theorem, answers Quest ion [T7T] for every isogeny 
class that is simple over ¥ q 2 . 

The answer to Question 11.11 for the simple ordinary isogeny classes that split 
over ¥ q 2 was determined by the first author and Maisner. The Weil polynomial of 
such an isogeny class is of the form x A + bx 2 + q 2 . The first author |MN02| App.] 
proved that when b = 1 — 2q there is no curve with the given Weil polynomial 
by showing that such a curve would have an automorphism whose existence is 
incompatible with the number of rational points on the curve over F g 2. For p > 2, 
the first author |How04] used a counting argument to show that when b = 2 — 2q 
there is again no curve with the given Weil polynomial. He found explicit formulas 
for the number of principally polarized surfaces (A, A) with A belonging to the 
given isogeny class, as well as for the number of these polarized surfaces that are 
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restrictions of scalars of elliptic curves over ¥ q 2 . The formulas for these two numbers 
both involve arithmetic invariants of the biquadratic field generated by the Weil 
polynomial, and a comparison of the two numbers using the Brauer relations shows 
that they coincide; thus, all (A, A) are non-Jacobians. Maisner |Mai04] extended 
these ideas to show that for all other values of b coming from simple isogeny classes, 
there is a curve with the given Weil polynomial. 

For supersingular surfaces over finite fields of characteristic 2, Question ll.il was 
answered by Maisner and the second author [MN07] by an explicit computation 
of the zeta functions of all supersingular curves of genus 2, using ideas of van der 
Gccr and van der Vlugt GV92J. For supersingular surfaces over finite fields of 
characteristic 3, the question was answered by the first author |How06j . again by 
explicit methods. 

McGuire and Voloch Vl)">, §3] determined which isogeny classes of split mixed 
abelian surfaces contain Jacobians, and gave the complete details of the argument in 
the case that one factor of the Weil polynomial of the isogeny class is x 2 ± + q. 

In this paper we cover the last steps to get a complete answer to Question ll.il 
In Part [T] we deal with the split isogeny classes not covered by the work of McGuire 
and Voloch, and in Part [2] we study the simple supersingular isogeny classes that 
split over ¥ q 2. These cases are solved with the use of completely different tech- 
niques. For the split case we use a result of Kani |Kan97j that characterizes when 
two elliptic curves can be tied together along finite subgroups to get a common cov- 
ering by a curve of genus two; Kani's result reduces the question of whether there 
is a Jacobian isogenous to a product E x F of two elliptic curves to the question 
of whether for some n > 1 there is an isomorphism from E[n] to F[n] that is an 
anti-isometry with respect to the Weil pairing (and that is 'non-reducible', see Sec- 
tion[3]). In order to understand the split supersingular case, we determine the Galois 
twists of the Dieudonne modules of certain supersingular elliptic curves. For the 
simple supersingular case we use results of Oort |Oor75j , Katsura and Oort |K087j , 
and Ibukiyama, Katsura, and Oort [IK086] on supersingular abelian surfaces over 
the algebraic closures of finite fields and their polarizations. Using these results, 
together with the theory of twists and work of Hashimoto and Ibukiyama [HI80 
and Ibukiyama |Ibu89j on quaternion hermitian forms, we determine which simple 
supersingular isogeny classes contain geometrically non-split principally polarized 
surfaces. 

In our analyses of the supersingular isogeny classes, both split and simple, it is 
convenient to assume that the characteristic of the base field is larger than 3. We 
may make this assumption because the characteristic 2 case is settled in |MN07j 
and the characteristic 3 case in |How06j . 

Conventions and notation. When we speak of a variety over a finite field k, 
we mean a variety defined over the algebraic closure fc of fc together with Galois 
descent data. By a morphism of varieties over a finite field fc, we mean a morphism 
of varieties over fc that is Galois-equivariant. By a geometric morphism of varieties 
over fc, we mean a morphism of varieties over fc. Thus, if E% and E2 are elliptic 
curves over a finite field, we will often speak of geometric isogenies from E\ to E^, 
As a consequence of this convention, operators such as Horn and End applied to 
varieties over fc will always refer to fc-rational homomorphisms and endomorphisms. 

If q is a power of a prime p, say q = p m , we let Q q denote the unramified degree- 
m extension of the p-adic number Q p , and we let Z q denote the ring of integers 
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of Qg. We will sometimes denote by A.r a ,b) the isogeny class of abelian surfaces over 
¥ q with Weil polynomial x A + ax 3 + bx 2 + aqx + q 2 . 

Part 1. Split abelian surfaces as Jacobians 

2. Introduction 

In this part of the paper we determine the Weil polynomials of the split isogeny 
classes of abelian surfaces that contain Jacobians. 

Our first two theorems concern the case of isogeny classes that contain product 
surfaces of the form E\ x E 2 , where E x and E 2 are elliptic curves over W q that are 
not isogenous to one another and that are not both supersingular. Let s and t be 
the traces of the Frobenius endomorphisms of E\ and E 2 , respectively, so that s ^ t 
and so that the Weil polynomial of E\ x E 2 is 

(x 2 — sx + q)(x 2 — tx + q). 

Theorem 2.1. Suppose that neither s 2 nor t 2 is equal to Aq and that E\ and E% 
are not both supersingular. Then there is a Jacobian isogenous to E\ x E 2 if and 
only if \s - t\ + 1 and {q, {s, t}} £ {2, {1, -1}}. 

Theorem 2.2. Suppose that E 2 is ordinary and that s 2 = Aq, so that E\ is su- 
persingular. Then there is a Jacobian isogenous to E\ x E 2 if and only if s — t is 
divisible by the square of an integer greater than 1 . 

Theorem 12.21 was proven by McGuire and Voloch |MV05| . who also mention the 
special case of Theorem l2.1l in which one of the curves is supersingular. We reprove 
their results here for completeness. 

Next we consider isogeny classes that contain squares of ordinary elliptic curves. 

Theorem 2.3. Let E be an ordinary elliptic curve over¥ q with trace of Frobenius 
equal to t. Then there is a Jacobian isogenous to E x E if and only if t 2 — Aq is 
neither —3 nor —A nor — 7. 

Finally, we turn to the split supersingular isogeny classes. We restrict our at- 
tention to finite fields of characteristic greater than 3, because the characteristic 3 
case is considered in |How06] and the characteristic 2 case is considered in [MN07J . 
Suppose that E\ and E 2 are supersingular elliptic curves over a finite field ¥ q of 
characteristic greater than 3, and let s and t be the traces of Frobenius of E\ and 
E 2 , respectively. 

Theorem 2.4. There is a Jacobian isogenous to E\ x E 2 if and only if s 2 = t 2 . 

Our main tool in proving these theorems is a result of Kani |Kan97j , which we 
review in Section [3] In Section 3] we state and prove a few elementary lemmas that 
we will need later in the paper. In Sections ElEl and [7] we prove our theorems for 
split non-supersingular isogeny classes. In Section [8] we compute certain twists of 
the Dieudonne modules of supersingular elliptic curves, and in Section [9] we use 
these computations to prove Theorem [231 

3. Tying elliptic curves together along torsion subgroups 

In this section we review a result of Kani that gives necessary and sufficient 
conditions for certain split abelian surfaces to be Jacobians. 
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Suppose E\ and E2 are elliptic curves over a field k and let n be a positive 
integer. Suppose ip: Ei[n] — > E2[n] is an isomorphism of group schemes over k that 
is an anti-isometry with respect to the Weil pairings on E\ [n] and E2 [n] . Let A be 
the abelian surface (Ei x E2)/ Graph(^) and let <p: Ei x E2 — > A be the natural 
isogeny. Then A fits in a diagram 



Ei x E 2 — ^ Ei x £2 




Here the top arrow is the multiplication-by-n map and A is the dual abelian 
surface of A. The existence of the bottom arrow follows from the fact that the 
graph of ip is a maximal isotropic subgroup of the n-torsion of E\ x E2 (see [Mil86 , 
Prop. 16.8, p. 135]). In fact, the induced map A: A — ► A is a polarization, and 
by looking at the degrees of the maps in the diagram we see that A is a principal 
polarization. Conversely, if A is a principal polarization of a non-simple abelian 
surface A over k, then A can be obtained in this way from a pair of elliptic curves 
(Ei,E2) and an anti-isometry £a[n] — > E^ln], for some n. 

Kani |Kan97j gives a criterion that allows one to determine when a principally 
polarized surface (A, A) obtained from an anti-isometry ip: Ei[n] — > -E2H is iso- 
morphic to the Jacobian of a curve. The criterion is easiest to state when n is a 
prime. 

Theorem 3.1 (Kani |Kan97| Thm. 3, p. 95]). Suppose n is a prime, and let E\, 
E2, and ip be as in the discussion above. The principally polarized surface 

(Ei x £ 2 )/Graph(^) 

is not a Jacobian if and only if there is an integer i (with < i < n) and a geometric 
isogeny ip: Ei — > E% of degree i(n ~ i) such that iip = ifilE^n]- 

There is a more complicated criterion when n is composite. We will only need 
to use the case n = 4. 

Theorem 3.2 (Kani). Suppose n — 4 and the characteristic of the base field k is 
not equal to 2. Let E±, E2, and ip be as in the discussion above. The principally 
polarized surface 

(Ei x £fe)/Graph(VO 
is not a Jacobian if and only if one of the following conditions holds: 

(a) There is a geometric isogeny ip: E\ — » E% of degree 3 such that ip = (plE^n]- 

(b) There are two order-2 subgroups Gi and G2 of Ei(¥ q ) and a geometric 
isomorphism (p: E\ — » E2 such that the graph of ip is equal to the set of 
points (x,<p(y)) m_Ei[4](F g )x£ , 2 [4](F g ) such that x+y G G\ and x—y G G2. 

Proof. This follows from Theorem 2.6 of |Kan97j . We make the assumption about 
the characteristic of k not being 2 only so that condition (b) can be stated in terms 
of groups and not group-schemes. □ 

We say that an anti-isometry ip: Ei[n] — > ^[n] is reducible if (A, A) is not a 
Jacobian. If ip is not reducible, then we refer to the process of constructing a 
Jacobian from E\, E2, and ip as tying E\ and E2 together along their n-torsion 
subgroups via ip. 
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4. Useful lemmas 

In this section we present some lemmas that will be helpful in later sections. 

Suppose that E is an elliptic curve over F 9 with trace of Frobenius t, and suppose 
that t 2 7^ Aq. Let it be the Frobenius endomorphism of E and let R be the subring 
Z[tt] of End(£'). Then R is an imaginary quadratic order of discriminant t 2 — q. 
Let O be the integral closure of R in R <g) Q. The endomorphism ring of E is an 
order that is contained in O and that contains R. Let £ be a prime integer. We say 
that E is maximal at € if € does not divide the index of End(_E) in O. We say that 
E is minimal at £ if £ does not divide the index of R in End(_E). 

Given an E as above, let £ be a prime that does not divide both t and q. Then it 
follows from [Wat69|, Thm. 4.2] that there is a curve isogenous to E that is minimal 
at £. 

Lemma 4.1. Let E be an elliptic curve over¥ q whose Weil polynomial is x 2 —tx+q, 
and suppose that t 2 ^ Aq. Let £ be a prime that does not divide both t and q, and 
suppose that E is minimal at £. Then the minimal polynomial of Frobenius acting 
on E[£] is x 2 ~ tx + q E ¥ e [x] . 

Proof. The characteristic polynomial of Frobenius on E[£] is x 2 — tx + q, and the 
only way that this might not be the minimal polynomial of Frobenius is if t 2 — Aq = 
mod I. 

Suppose t 2 — Aq = mod £. Let b be an integer such that t = 2b mod £, and let 
7T be the Frobenius endomorphism of E. Then the characteristic polynomial of it 
on E[£] is (x — b) 2 , and the minimal polynomial will be x — b if and only if (tt — b)/£ 
lies in End(i?). But the index of End(-E) in Z[ir] is coprime to £ by assumption. □ 

Lemma 4.2. Let£ be either A or an odd prime and let K be an imaginary quadratic 
field whose discriminant is not equal to —t. Then there are infinitely many rational 
primes m that split in K and that are nonsquares modulo £. 

Proof. Let A be the discriminant of K . The splitting of a rational prime in K 
depends only on its congruence class modulo A. If A is coprime to £, then we can 
choose a congruence class modulo £A such that every prime m in this congruence 
class splits in K and is a nonsquare modulo £. So from this point on we consider 
the case where £ and A have a common factor. 
We first consider the case where £ is prime. 

Write A = —2 e £D for some odd positive D, and suppose that D > 1. If to is 
a prime that is congruent to 1 modulo 8, that is not a square modulo £, and such 
that the Jacobi symbol (m/D) is — 1, then we have 



A\ /-l \ / 2 \ / £ \ ( D 



TON /TO 



toJ^-^I-J [d) = 1 - 

So when D > 1, there are infinitely many primes that split in K and that are not 
squares modulo £. 

Suppose D = 1, so that either A = -8£ or A = -A£. Suppose A = -8£. Then 
if to is a prime that is congruent to 5 modulo 8 and that is a nonsquare modulo £, 
then 

'A \ /-l \ / 2 \ / £ 



= 1. 



On the other hand, suppose that A = — A£. This can only happen if t = 1 mod 4. 
If to is a prime that is congruent to 3 modulo 4 and that is a nonsquare modulo £, 



s 
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then 



A\ f-l 



m) \ m ) \ m) ^ ^ V £ 



rn 



Thus, in every case there are infinitely many primes that split in K and that are 
not squares modulo £. 

Next we consider the case where £ — 4. 

Suppose A = — AD for some odd D > 1. This can only be the case if D = 
1 mod 4. If m is a prime that is congruent to 3 modulo 4 and such that the Jacobi 
symbol (m/D) is —1, then we have 

'A\ 



;)-£)(£)- (-"■(?) 



1. 



and we see that there are infinitely many primes that split in K and that are not 
squares modulo i. 

Suppose A = — 8D for some odd D > (with D = 1 being allowed). Suppose 
D = 1 mod 4. Then if m is a prime that is 3 modulo 8 and such that the Jacobi 
symbol (m/D) is 1, we have 



= © (I) (£)=<-> ■<->•( 



DJ 



= 1. 



On the other hand, if D = 3 mod 4, we can consider primes m that are 7 modulo 
8 and such that the Jacobi symbol (m/D) is —1, so that 

-) = (-) (-) (-) =(-!)•!• 
my \ m J \m J \m J \D J 

Again we see that in both cases there are infinitely many primes that split in K 
and that are not squares modulo £. □ 

Next we present a lemma that provides us with a large supply of anti-isometries. 
This lemma and the one that follows it will refer to integers £ that are assumed to 
be either prime or equal to 4. It will be convenient to define £* to be the unique 
prime divisor of such an integer £. 

Lemma 4.3. Let E\ and E2 be elliptic curves over a finite field ¥ q and let s and t 
be their traces of Frobenius. Suppose that \s — t\ is neither nor 1 and that neither 
s 2 nor t 2 is equal to Aq. Let £ be a divisor of s — t that is either 4 or a prime, and 
assume that £ is coprime to q if either E\ or E2 is super singular. If £ = 2 then let 
m = 1; otherwise, let m be a positive integer coprime to £ whose image in (Z/€Z) is 
a nonsquare. Suppose that E\ and Ei are minimal at £* , and that E[ is an elliptic 
curve that is m-isogenous to E\. Then either there is an ¥ q -defined anti-isometry 
from E\ [£] to E 2 [£] , or there is one from E[ [£] to E 2 [£] ■ 

Proof. By Lemma \A. II the minimal polynomials of Frobenius on E\[£*] and £2^*] 
are both equal to x 2 — tx + q G F^fa;]. It follows easily that there are points 
Pi e E 1 [£](¥ q ) and P 2 G E 2 [£](¥ q ) that generate the Galois modules E x [£}(¥ q ) and 
E 2 [£] (¥ q ) , respectively. 

We claim that the fc-group schemes Ei[£] and E 2 [£] are isomorphic. If p 7^ £* 
then we can see this by defining an isomorphism E\ [£] — > E 2 [£] by sending Pi to 
P 2 and extending by Galois equivariance. If p = £*, then E\[£] and E 2 [£] are both 
products of a reduced group scheme of rank £ and a local group scheme of rank 
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I, On each of the reduced group schemes, the Frobenius acts as multiplication- 
by-t, so the reduced subschemes of Ei[£] and E 2 [£] are isomorphic. But the local 
subschemes are the duals of the reduced subschemes, so the local subschemes are 
isomorphic as well. Thus E\[£] and E 2 [£] are isomorphic. 

Let ip'- E\[£] — > E 2 [£] be an isomorphism of group schemes over ¥ q . For each 
i = 1, 2 let ei be the Weil pairing Ei[£] x Ei[£] — > up. Then there is an element r of 
Aut/x^ = (Z/tZ)* such that the diagram commutes: 

El [£] x E x [e\ — ^ E 2 [£] x E 2 [C] 

ei e 2 
^ l-H 

Let F be an elliptic curve isogenous to E\ , and suppose ip : _F — > i?i is an isogeny 
of degree coprime to £ If we replace £1 by £ and ip by i/' ¥>; then r is replaced 
with r times the degree of ip. Using multiplication by integers in End(£a), we can 
modify r in this way by arbitrary squares in (Z/fZ)*. Using the isogeny E[ — > Ei, 
we can modify r by the integer m, which is a nonsquare modulo £ when £ =/= 2. 
Therefore we can modify r so that it is equal to —1; in other words, we can find an 
anti-isometry that maps either E\ [£] or E[ [£] to E 2 [£] ■ □ 

The next lemma is a useful special case of Lemma 14.31 

Lemma 4.4. Let E\ and E 2 be elliptic curves over a finite field ¥ q and let s and t 
be their traces of Frobenius. Suppose that \s — t\ is neither not 1 and that neither 
s 2 nor t 2 is equal to 4g. Write s 2 — Aq = f 2 Ai and t 2 — Aq = f%A 2 for integers 
fi and fundamental discriminants Ai . Let £ be a divisor of s — t that is either 4 
or a prime, and assume that £ is coprime to q if either E\ or E 2 is super singular. 
Suppose that Ai and A 2 are not both equal to —£. Then there are elliptic curves 
F\ and F 2 , isogenous to E\ and E 2 , respectively, for which there is an ¥ q -defined 
anti-isometry F\ [£] — > F 2 [£] . 

Proof. By symmetry, we may assume that Ai 7^ —I. 

Replace E\ and E 2 with isogenous curves that are minimal at £* . If I = 2 then 
Lemma 14.31 shows that there is an anti-isometry E\ [£] — > E 2 [£] , so we may assume 
that £ > 2. 

Let m be a prime number. If m splits in End(£a) CD Q = Q(VAi) then there 
is a degree-m isogeny from E\ to some other elliptic curve F. (Indeed, Ito flto90] 
proves that there is a degree-m isogeny from E\ to some F if and only if either m 
splits or ramifies in End(i?i) ® Q — Q(VAi) or m divides f\.) Lemma [4.21 savs 
that there are infinitely many m that are nonsquares modulo £ and that split in 
End(i?i) (g> Q, so we know there is an elliptic curve E[ that is m-isogenous to E\ 
for some m that is not a square modulo £. Using Lemma 14.31 we see that there is 
either an anti-isometry E\\l\ — » E 2 [£] or an anti-isometry E[[£] — » -E2K], and we 
are done. □ 

We end with a lemma that will help us show that certain anti-isometries are not 
reducible. 

Lemma 4.5. Suppose E and F are ordinary elliptic curves over a finite field k, 
let F'/k be a twist of F, and let \- F' — * F be a geometric isomorphism. Suppose 
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that E and F' are isogenous over k. Let £ be a prime, and suppose ip: E[£] — > 
F[£] is a Galois- equivariant anti-isometry. If ip is reducible, then x\f>[£] is Galois 
equivariant. 

Proof. Suppose ip is reducible. Then Theorem 13.11 shows that there is an integer i 
and a geometric isogeny ip: E — > F of degree i(n — i) such that tip = <p\b\£\- The 
left-hand side of this equality is Galois equivariant, so ip\e[£\ is Galois equivariant. 

Every geometric isogeny E — > F can be written as the composition of a geometric 
isogeny E — > F' with the geometric isomorphism x : _F' — > _F, so we may write 
ip — x ° f' for a geometric isogeny <p' ; E — > F' . Since E and F' are ordinary, all of 
their endomorphisms are defined over k, and all isogenies from E to F' are defined 
over k. It follows that p' is Galois equivariant. Also, ip>' gives an isomorphism 
E[i] — > so \ induces a Galois equivariant isomorphism from F'[£] to F[£). □ 

5. Proof of Theorem 12.11 

Suppose that |s — 1\ = 1. Then a result of Serre (see [LauOOl Lem. 1] or |HL03[ 
Thm. 1(a)]) shows that there is no Jacobian isogenous to E\ x E^. 

Suppose that \s — t\ > 1. The remainder of the proof of Theorem 12.11 breaks into 
five cases: 

(1) Ei and Ei are geometrically non-isogenous. 

(2) E\ and E2 become isogenous to one another over a degree-2 extension. 

(3) Ei and E% become isogenous to one another over a degree-3 extension. 

(4) Ei and E2 become isogenous to one another over a degree-4 extension, but 
not over a degree-2 extension. 

(5) Ei and E2 become isogenous to one another over a degree-6 extension, but 
not over a degree-2 or degree-3 extension. 

To see that these cases include all possibilities, we note that if E\ and E2 are 
geometrically isogenous to one another then they must both be ordinary (because 
the hypotheses of the theorem preclude them from both being supersingular) . Let 
7Ti and 7T2 be the Weil numbers of E\ and E2, considered as elements of Q. If Ei 
and E2 become isogenous over a degree- n extension (and no smaller extension), 
then 7T™ and tt^ are conjugate quadratic integers; replacing 7Ti with its conjugate, 
if necessary, we may assume that 7r™ = ir^ ■ Then the two quadratic fields Q(tti) 
and Q(tt2) are equal, and they contain the primitive n-th root of unity 7Ti/7T2. This 
restricts the possible values for n to be 2, 3, 4, and 6. 

We will consider these cases separately. In each case, we will denote the charac- 
teristic of F q by p. 

5.1. Case 1: E\ and E2 are geometrically non-isogenous. Pick a prime £ 
dividing s — t. Since Ei and E2 are not both supersingular, £ is not equal to p if 
either curve is supersingular. 

Let 7Ti and tt2 be the Weil numbers of Ei and E2, respectively, and let K\ 
and K2 be the imaginary quadratic fields generated by 7Ti and 1:2- If one of these 
fields has discriminant unequal to —£, then Lemma 14.41 shows that we can replace 
Ei and E2 with isogenous curves for which there is an F 9 -defined anti-isometry 
Ei[£] — > £2 Since E\ and E2 are geometrically non-isogenous by assumption, 
Theorem 13.11 shows that we can tie E\ and E2 together along their ^-torsion to get 
a genus-2 curve with Jacobian isogenous to E\ x E 2 ■ 
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We are left to consider the case where K\ and Ki are both isomorphic to the 
imaginary quadratic field K of discriminant —I. In this case, we may view tti and 
7T2 as elements of K. 

If Ei and E 2 are both ordinary, then their Weil numbers must differ from one 
another by a root of unity (and perhaps complex conjugation). But then E\ and 
Ei become isogenous to one another after a base field extension, contradicting our 
hypotheses. 

So suppose one of our elliptic curves, say E\, is supersingular and the other is 
ordinary. We have already noted that in this case £ ^ p. Now, we know the possible 
Weil numbers for supersingular elliptic curves — see |Sch87j or |Wat69[ Thm. 4.2] 
for example and the only way a supersingular Weil number can generate an 
imaginary quadratic field of prime discriminant unequal to — p is if that field is 



3) and if p ^ 1 mod 3. But then p does not split in Q(y/— 3), so there are no 




ordinary elliptic curves over ¥ q with CM by Q(y/— 3), contradicting the existence 




5.2. Case 2: E\ and Ei become isogenous to one another over a degree-2 
extension. In this case, there is an integer t such that the Weil polynomials of E\ 
and Ei are x 2 — tx + q and x 2 + tx + q. Also, E\ and Ei are both ordinary. Let 
A = t 2 — Aq and let R be the imaginary quadratic order of discriminant A. 

We have two arguments that each cover many cases, and that together cover all 
but one case. 

Lemma 5.1. If the class number of R is greater than 1, there is a Jacobian isoge- 
nous to E\ x Ei. 

Proof. If the class number of R is greater than 1 , we can choose Ei and Ei to have 
endomorphism ring R, and to be geometrically non-isomorphic. Then E\ and Ei 
are minimal at 2, so Lemma T4.3I shows that there is an anti-isometry ip: Ei[2] — > 
Ei [2] . Theorem 13.11 shows that ip is not reducible because there are no geometric 
isomorphisms E\ —* E 2 . Thus we can tie E\ and Ei together along their 2-torsion 
to get a Jacobian isogenous to Ei x Ei. □ 

Lemma 5.2. If \t\ > 1 then there is a Jacobian isogenous to E\ x Ei. 

Proof. Let £ be a prime divisor of t. 

First suppose that £ is odd. Note that £ is not equal to p, because £ divides t and 
Ei and Ei are not both supersingular. It follows that £ does not divide A = t 2 — 4q. 
Then Lemma 14.41 shows that we can replace E\ and Ei with isogenous curves 
for which there is an F 9 -defined anti-isometry ip : E\ [£] — > Ei [£] . Let E' 2 be the 
quadratic twist of Ei and let \ '■ E'i ~* E 2 be the standard geometric isomorphism. 
Then Lemma 14.51 shows that if %j) is reducible, then \ induces a Galois-equi variant 
isomorphism from E' 2 [£] to Ei\£\. But from the definition of the quadratic twist, 
we know that x(P a ) — ~{x{P)Y f° r a U geometric points P, where a denotes the 
g-th power Frobenius automorphism of ¥ q . From this it is clear that \ does not 
give a Galois-equivariant isomorphism E' 2 [£] — > Ei[£], because £ > 2. Thus ip is not 
reducible, and we can tie E\ and Ei together along their ^-torsion via ip to get a 
Jacobian isogenous to Ei x Ei. 

Next suppose £ = 2. Lemma 14.41 shows that we can replace E\ and Ei with 
isogenous curves for which there is an anti-isometry ip : Ei [4] — > Ei [4] . According 
to Lemma l4~5| there are two ways in which ip might be reducible. In the first way, 






of E 2 . 
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there is a geometric isogeny <p: Ei — ► E2 of degree 3 such that ^Is^i = ±tp. But 
as in the argument for odd £, we obtain a contradiction from the facts that ±ip is 
Galois equivariant while ^Ib^] is not. 

The other way that ip can be reducible is if there is a geometric isomorphism 
<p: Ex — > E2 and two order-2 subgroups G\ and G 2 of Ei(¥ q ) such that the graph 
of ip is equal to the set of (x, <p(y)) in £i[4](F g ) x E 2 [4](¥ q ) such that x + y e G\ 
and x — y <E G 2 . 

In particular, if E% is not the quadratic twist of E\ then ip is not reducible. 
Suppose Ei is the quadratic twist of E\ and that ip is reducible. Identify £2 [4] 
with Ei[4] provided with the negative Galois action. Pick 4-torsion points X and 

Y oiEx(¥ q ) such that Gi = (2X) and G 2 = (2Y). Then ip{aX + bY) = p(aX-bY) 
for some automorphism ip of E% ■ Since E2 is ordinary, all of its automorphisms are 
defined over ¥ qi so ip is Galois equivariant if and only if tp~ 1 oip is Galois equivariant, 
and one can show that this is the case if and only if 2X a — 2Y and 2Y a = 2X: 
here a denotes the Frobenius element of Gal(F 9 /F 9 ). 

So assume that 2X a = 2Y and 2Y a = 2X. Under this assumption, we can com- 
pute the number of reducible Galois equivariant anti-isomctrics. The only choices 
for Gi and G 2 are Gi = (2X), G 2 = (2Y) and Gi = (2Y), G 2 = (2X), and swap- 
ping Gi and G 2 is equivalent to replacing tp with —tp. Thus we see that the auto- 
morphism group of E 2 acts transitively on the set of reducible Galois-equivariant 
anti-isomctrics. 

Let us compute the number of Galois equivariant anti-isometries there are from 
.Ei [4] to -E 2 [4]. To make the computation simpler, we replace Y with X a (this does 
not change the group G 2 ), and write Y a = eX + fY, where e — ±1 and / 6 {0, 2}. 
Note that it follows that the characteristic polynomial of Frobenius on the 4-torsion 
of Ei is x 2 + fx — e. Since the Weil polynomial of E\ is x 2 — tx + q, we see that 
e = —q mod 4 and f = t mod 4. 

A Galois-equivariant map \ '■ Ei [4] — ¥ E 2 [4] that sends X to aX + bY must send 

Y to bqX — (a + tb)Y, and x w iU be an anti-isometry if and only if a 2 + tab + qb 2 

1 mod 4. There are four pairs (a, 6) of elements of (Z/4Z) that satisfy this condition 
if q = —1 mod 4 and eight if q = 1 mod 4, so there are either exactly 4 or exactly 
8 Galois-equivariant anti-isometries. 

If 4P Aut E 2 =2 then we have only 2 reducible Galois-equivariant anti-isometries, 
so there are at least two nonreducible ones. If # Aut E 2 — 6 then either there are 
8 Galois-equivariant anti-isometries in total and we can choose a nonreducible one, 
or else there are only 4 Galois-equivariant anti-isometries, in which case Aut E 2 
cannot act faithfully on the reducible Galois-equivariant anti-isometries; but since 
the automorphism —1 doesn't act trivially, the kernel of the action must be of 
order 3, and once again we see that there are only two reducible Galois-equivariant 
anti-isometries. 

If # Aut E 2 = 4 then A = t 2 — 4q = —4, and the Frobenius can be written 
7r = (i/2) + i. Note that therefore q = 1 mod 4. We noted above that in this case 
there are eight Galois-equivariant anti-isometries, so we have four nonreducible ones 
to choose from. □ 

The only situations not covered by Lemmas 15.11 and 15.21 are those in which t = 1 
and in which A lies in the set 



{-3, -12, -27, -4,-16, -7, -28, -8, -11, -19, -43, -67, -163}. 
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That means the only cases left to consider are those in which (q, A) is one of 
{(2, -7), (3, -11), (5,-19), (7, -27), (11, -43), (17, -67), (41, -163)}. 

Suppose q is odd. Then characteristic polynomial of Frobenius is congruent to 
x 2 + x + 1 modulo 2. In this case there are three Galois-equivariant anti-isometries 
from -Ei [2] to i?2[2]. If they are all reducible then we must have # Auti?i = 6, so 
that A = —3. But this is not one of the A's on our list of (q, A) pairs. 

Finally we are left with t = 1 and q — 2. We find, by explicitly enumerating the 
genus-2 curves over F2, that none of them has Weil polynomial (x 2 +x+2)(x 2 — x+2). 

5.3. Case 3: E\ and E2 become isogenous to one another over a degree-3 
extension. In this case the Weil numbers of E\ and E2 must both live in Q(ll>), 
where u> 2 + lo + 1 = 0, and they can be chosen so that they differ multiplicatively 
by u>. So let us write 

7i"i = a + bUJ 

7T2 = CJ7Tl = b + aLO. 

Note that 

q = 7Ti7ff = a 2 — ab + b 2 

s = 2a — b 

t = 2b - a 
Ai = -3b 2 
A 2 = -3a 2 
s — t = 3(a — b). 

We observe several facts. First, we see that Ai and A2 cannot be equal; if they were 
equal, then we would have b — —a, and 3 would divide both s and g, contradicting 
the ordinariness of E\. Second, we note that the same reasoning shows that a and 
b are coprime to each other. Third, we see that q is congruent to 1 modulo 3, and 
in particular, the characteristic of ¥ q is not 3. And fourth, we see that q is odd, so 
the characteristic of ¥ q is not 2. 

Suppose a and b are both odd, so that 2 divides s — t. Replace Ex and E 2 with 
isogenous curves whose endomorphism rings have discriminants Ai and A2, re- 
spectively, so that in particular E\ and Ei are geometrically non-isomorphic. Then 
there is an anti-isometry ip : E\ [2] — > E2 [2] , and since Ei and -E 2 are geometrically 
non-isomorphic, Theorem 13.11 shows that ip is not reducible. Thus we may tie E\ 
and E2 together along their 2-torsion to get a genus-2 curve. 

We are left to consider the case in which one of a and b is even. By symmetry, 
we may assume that b is even. 

Suppose that a is not a multiple of 3. Replace E2 with an isogenous curve that 
has complex multiplication by "L[lj\. Since a is not a multiple of 3, we see that E2 is 
minimal at 3. Applying Lcmma l4.4[ we find that we can replace E\ by an isogenous 
curve so that there is an anti-isometry ip : E\ [3] — > E2 [3] . 

Let F be the cubic twist of E 2 that is isogenous to Ei, and let y: F — > E 2 be 
a geometric isomorphism. Lemma 14.51 shows that if ip is reducible, then x induces 
an isomorphism from F[2] to £9 [3] as group schemes over ¥ q . 

We know that E2 can be written in the form y 2 = x 3 + e for some e € F 9 , and the 
twist F of E2 can be written y 2 — cx 3 + e for some c € ¥ q that is not a cube. Then 
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the geometric isomorphism \ can be taken to be (x,y) <— > (dx,y), where d € ¥ q 
satisfies d 3 = c. But then it is clear that x wm n °t induce a Galois-equivariant 
isomorphism F[3] — > E2[3] if F[3] contains an element with nonzero x-coordinate. 
Since F[3] clearly contains such an element, ip must not be reducible, so we can tie 
E\ and E2 together along their 3-torsion. 

Finally, suppose that a is divisible by 3. Replace E2 with an isogenous ellip- 
tic curve whose endomorphism ring has discriminant A2, and replace E\ with an 
isogenous elliptic curve with complex multiplication by Z[w]. Since b is even, there 
is a 2-isogeny from E\ to an elliptic curve whose endomorphism ring is Z[\/— 3]. 
Lemma 14.31 shows that there is an anti-isometry ip from either E\ [3] or E[ [3] to 
£2 [3]. Lemma [4.51 shows that if this isometry is reducible, there must be a geo- 
metric 2-isogeny from E\ or E[ to E^. But by looking at the discriminants of the 
endomorphism rings of these curves, we see that every isogeny from E\ or E[ to 
E2 must have degree divisible by 3. Thus ip is not reducible, so we may use it to 
produce a genus-2 curve whose Jacobian is isogenous to E\ x E 2 . 

5.4. Case 4: E\ and E2 become isogenous to one another over a degree-4 
extension, but not over a degree-2 extension. In this case the Weil numbers 
of Ei and E% must live in Q(i), where i 2 = —1, and they may be chosen so that 
they differ multiplicatively by i. So let us write 

71"! = a + bi 
1T2 = — b + ai 

so that we have 

q = a 2 + b 2 

s = 2a 

t = -2b 
Ai = -4& 2 
A 2 = -4a 2 . 

If b were equal to ±a then q and s would both be even, contradicting our assump- 
tion that E\ is ordinary. Therefore Ai and A2 are not equal to one another, so if 
we pick Ei and E 2 with minimal endomorphism rings, they will be geometrically 
non-isomorphic. Since s — t is even, we can tie E\ and E 2 together along their 
2-torsion. 

5.5. Case 5: Ei and E2 become isogenous to one another over a degree-6 
extension, but not over a degree-2 or degree-3 extension. In this case the 
two Weil numbers must live in Q(u>) , where lo 2 + uj + 1 = 0, and they can be chosen 
to differ multiplicatively by a primitive sixth root of unity, such as — u>. So let us 
write 

7Ti = a + bO 

7T 2 = — LOTXi = —b — auj 
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so that we have 

q = tt\Wi = a 2 — ab + b 2 

s = 2a — b 

t = a-2b 
Ai = -3b 2 
A 2 = -3a 2 
s — t = a + b. 

As in Case 3, we see that Ai ^ A 2 , that (a, b) = 1, and that the characteristic of 
¥ q is not 2. Since (a, b) = 1, at least one of a and b is odd; by symmetry, we may 
assume that a is odd. Let £ be the smallest prime divisor of s — t = a + b. Note that 
neither a nor b can be divisible by £, so both E\ and E 2 are automatically minimal 
at £. 

Let us replace E 2 with an isogenous curve that has complex multiplication by 
Z[u>]. We will show that we can replace E\ with an isogenous curve for which there 
is an anti-isometry E\ [£] — > E2 [£] ■ 

First suppose that £ ^ 3. Since E\ has complex multiplication by an order 
in Q_(uj) and since £ ^ 3, we know from Lemma 14.21 that there is a prime m = 
2 mod 3 for which there is an elliptic curve E[ that is m-isogenous to E± . Applying 
Lemma 14. 3[ we find that there is an anti-isometry from either E\ [£] or E[ [£] to 
E 2 [£\. 

On the other hand, suppose that £ = 3. Since £ was chosen to be the smallest 
prime divisor of s — t = a + b, we know that a + b is odd; since a is odd, we know 
that b is even. It follows that E\ is 2-isogenous to some other curve E[; applying 
Lemma 14.31 we find that there is an anti-isometry from either E\ [£] or E[ [£] to 
E 2 {£}. 

Let F be the sextic twist of E 2 that is isogenous to E\ , and let \ '■ F ~* -^2 be 
a geometric isomorphism. Lemma 14.51 shows that if ip is reducible, then \ induces 
an isomorphism from F[£) to E 2 [£] as group schemes over ¥ q . 

We know that E 2 can be written in the form y 2 = x 3 + e for some e S V q , and 
the twist F of E 2 can be written cy 2 = dx 3, + e for some cgF, that is not a square 
and some ci S F 9 that is not a cube. Then the geometric isomorphism \ can be 
taken to be {x, y) 1— » (gx, /y), where /, g £ ¥ q satisfy g 3 = d and f 2 = c. But then 
it is clear that x will not induce a Galois-equivariant isomorphism i* 1 ^] — » E 2 [£\. 
Therefore, we can tie E\ and E 2 together along their ^-torsion. 

This completes the proof of Theorem 12. II □ 

6. Proof of Theorem 12.21 

Let d = t — s, and suppose d is squarefree. Then the proof of Corollary 12 
of (HL03| p. 1689] shows that there is no Jacobian isogenous to E\ x E 2 . 

On the other hand, suppose there is a prime £ whose square divides d. The 
Frobenius tt\ on E\ is equal to an integer r with r 2 = q. Let ir 2 be the Frobenius 
on E 2 , and let z be the element (ir 2 — r)/£ of End(i?2) <£> Q. Then we have 

z 2 - (d/£)z-rd/£ 2 = 0, 

so z is integral. If we replace E 2 with an isogenous curve whose endomorphism 
ring is maximal, then z £ End(£?2) so that ir 2 acts as r on Therefore there 
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are Galois-equivariant anti-isometries from Ei[£) to -E^]. All of them give rise 
to Jacobians isogenous to E\ x E2, because E\ and E2 are geometrically non- 
isogenous. □ 

7. Proof of Theorem 12.31 

Let A = t 2 — 4q and let R be the quadratic order of discriminant A. Using 
Serre's appendix to |Lau 02 or the main results of |How95j . we see that if A is a 
fundamental discriminant, then there is a bijection between the set of Jacobians 
isogenous to E x E and the set of indecomposable unimodular hermitian lattices 
of rank 2 over R. Hoffmann |Hof91j shows that if A is —3, —4, or —7, then there 
are no such indecomposable unimodular hermitian lattices, so for these values of A 
there are no Jacobians isogenous to E x E. 

Suppose A is neither —3 nor —4 nor —7, and suppose q is odd. Then there 
is an E' isogenous to E whose automorphism group has order 2, and Corollary 6 
of [HLPOOJ explicitly constructs a genus-2 curve whose Jacobian is isogenous to 
E' x E'. 

Suppose A is neither —3 nor —4 nor —7, and suppose q is a power of 2. Then 
A = 1 mod 8, so A is not the discriminant of an imaginary quadratic order of 
class number one (all such discriminants other than —7 are either even or are 5 
modulo 8). Therefore there is an elliptic curve E' that is isogenous to E but 
that is geometrically non- isomorphic to E. The group schemes E[2] and E'[2] are 
both isomorphic to the product of ^2 with its dual, so there is an anti-isometry 
E[2] — > -E'[2]. Since E and E 1 are geometrically non-isogenous, this anti-isometry 
gives rise via Theorem 13. II to a Jacobian isogenous to E x £". □ 

Remark. It is also possible to prove the existence of a Jacobian isogenous to E 2 in 
the case where t 2 — Aq ^ {—3, —4, —7} directly from the results of Hoffmann, Serre, 
and the first author that we cited above, but some care must be taken in the case 
where A is not a fundamental discriminant. 

8. Twists of Dieudonne modules of supersingular elliptic curves 

Let q be an even power of a prime p, say q — p 2a . Our goal in this section is to 
prove the following result. 

Proposition 8.1. Suppose p > 3. If E and E' are supersingular elliptic curves 
overFq that are not isogenous to one another over¥ q , then the group schemes E[p] 
and E'[p] are not isomorphic to one another over ¥ q . 

We will prove this proposition by showing that the Dieudonne modules of E[p] 
and E'[p] are not isomorphic to one another. For concise background information 
on Dieudonne modules and p-divisible groups, see [Wat69, Ch. 1] or [Oda69l §3]. 
The first step in our proof of Proposition 18.11 will be to compute the twists of the 
Dieudonne module of a particular supersingular curve. 

Let E be a supersingular elliptic curve over ¥ q whose Weil polynomial is (x — 
y^) 2 . As noted at the end of Section [TJ we use Q q to denote the unramificd 
extension of Q p with residue field ¥ q and 7L q to denote the ring of integers of Q q . Let 
a be the automorphism of Z g over Z p that is the lift of the Frobenius automorphism 
of ¥ q over F p , and let 21 be the (non-commutative) ring Z q [F, V], where F and V 
are indeterminates that satisfy 

FV = VF = p, FX = X a F, and VX a = XV. 
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Recall that the Dieudonne module M associated to E (or more precisely, to the 
p-divisible group of E) is a certain left 2t-module. Waterhouse [Wat691 p. 539] 
computes that M is a free rank-2 Z g -module with a basis {x, y} such that 

Fx = Vx = y and Fy — Vy = px. 

In particular, we see that all elliptic curves in the isogeny class with Weil polynomial 
(a; — yfq) 2 have isomorphic Dieudonne modules. Waterhouse also notes that the 
cndomorphism ring of M is isomorphic to the ring of integers O of the unique 
quaternion algebra H p over Q p , and it follows from Waterhouse's analysis that M 
gains no further endomorphisms when the base field is extended to ¥ q . 

For every (p 2 — l)st root of unity ( in Q p 2 we define a Dieudonne module as 
follows: Let £ 6 Q q be a (p 2a — l)st root of unity whose norm to Q p 2 is equal to (. 
Let Mq be a free rank-2 Z g -module generated by two elements w and z, and let F 
and V act on w and z via 

Fw = z, Fz — £~ 1 pw and Vw — £ ff z, Vz = pw. 

One can check that this does give a well-defined 21- module structure to Mq, and 
that the isomorphism class of does not depend on the choice of £. 

Proposition 8.2. The Dieudonne modules over¥ q are pairwise nonisomorphic 
over W q , and they are all twists of M over ¥ q . The module is the twist of M 
by the automorphism £ of M . If p > 3, then every ¥ q -twist of M is isomorphic to 
one of the Mq . 

Proof. Let t be an arbitrary element of such that Ft pM^, and write t = 
aw + bz for some a, b € Z g . We see that a must be a unit of Z g . We compute that 

Ft = a a z + VC 1 PW 

Vt = a a ~ 1 £ T ~ 1 z + b a ~ 1 pw. 

It follows that for every c € Z g with Ft = cVt mod pM^ , we have 

c= (a CT /a <T_1 )^ CT_1 modpZq. 
Taking norms to Q p 2 , we find that 

N Q q /Q p 2 (c) = 1 • ^Q 5 /Q p2 (r"" 1 ) = C mod p. 

Thus, we can recover £ from Mf, so the are pairwise nonisomorphic. 

Let -B be the ring of integers of the maximal unramificd extension of <Q q and 
let 25 = B[F, V], where F and V satisfy the same properties as before. The base 
extensions of the Mq to ¥ q are the 25-modules Mq generated as _B-modules by w 
and z and with 

Fw = z, Fz = £~ x pw and Vw = £ CT z, Vz = pw. 

2 -. 

Let a £ B* satisfy a a ~ = £. Then one can check that the map of 25-modules 
that sends x to aw and y to of z gives an isomorphism ip from M to Mq. 

The Frobenius automorphism of ¥ q over F g acts on Hom(Af , M^), and we let ip( q > 
denote the image of tp under this action. We see that the automorphism ip" 1 ^^ 
of M is the map that sends xto a" ~ x. Since £ = a a ~ , we have 

a" 2 "' 1 = e 1+CT2+ - +ff2a " = NonnQ, /Qpa (0 = £ 
Thus, A/ c is the twist of A/ by (. 
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The general theory of twists |Ser94j shows that the F 9 /F g -twists of M correspond 
to the elements of the pointed cohomology set H 1 (Gal(¥ q /¥ q ), O*). Since the Galois 
group acts trivially on O* , this cohomology set consists of the conjugacy classes of 
O* whose elements have finite order. 

Fix an embedding of Q p 2 into H p . We know (see |Rei031 Thm. 14.5]) that there 
is an element s £ H p with the properties that s 2 = p and H p = Q p 2(s), and such 
that s _1 a;s = x 17 for all x £ Q p 2. Suppose that p > 3, and suppose that r\ is a 
root of unity in O. Then Q p (f?) is at most a quadratic extension of Q p , and since 
cyclotomic extension of Q p have ramification index at least p — 1 if they are ramified 
at all, it follows that Q p (?y) is an unramified extension of Q p . Thus there is a root 
of unity £ in Q p 2 of the same order as rj, and the Skolem-Noether theorem tells 
us that there is an element x of H p that conjugates r] to £. Let t be the unique 
power of s such that tx € O*, and let y — tx. Then y conjugates rj to either £ or 
£ CT . Thus, the elements of H 1 (Gal(¥ q /¥ q ), O*) are represented by the conjugacy 
classes that contain roots of unity in Q p 2 . On the other hand, it is easy to see that 
no element of O* conjugates one root of unity in Q* 2 to another. It follows that 
when p > 3 there is a bijection between H 1 (Gal(¥ q /¥ q ),0*) and the roots of unity 
in Q p 2 . Since the M$ are the twists of M associated to these roots of unity, we find 
that every twist of M is isomorphic to some Mf . □ 

Remark. It is not hard to show that when p = 2 there are seven conjugacy classes 
of roots of unity in O*: in addition to the six conjugacy classes obtained from the 
roots of unity in Q4, there is also a single conjugacy class containing a primitive 
fourth root of unity. Likewise, when p = 3 there are ten conjugacy classes of roots 
of unity in O*: eight classes obtained from the roots of unity in Qg, one class 
containing a primitive cube root of unity, and one class containing a primitive sixth 
root of unity. 

Proof of Provosition \8.1\ Let s = p a be the positive square root of q. There are at 
most 5 isogeny classes of supersingular elliptic curves over ¥ q . There are always 
isogeny classes with Weil polynomials (x — s) 2 and (x + s) 2 . If p = 2 mod 3, then 
there are isogeny classes with Weil polynomial x 2 + sx + q and x 2 — sx + q; each 
of these isogeny classes contains two elliptic curves, and they are both twists of the 
elliptic curve y 2 — x 3 — 1 (by automorphisms of order 3 for the former isogeny class, 
and of order 6 for the latter) . If p = 3 mod 4 then there is an isogeny class with 
Weil polynomial x 2 + q; there are two curves in this isogeny classes, each a twist of 
y 2 = x 3 — x by an automorphism of order 4. (These statements follow from [Sch87, 
Thm. 4.6] and its proof.) 

We already noted that the Dieudonne module of every elliptic curve with Weil 
polynomial (x — s) 2 is isomorphic to the module M defined earlier. It is also clear 
that every elliptic curve with Weil polynomial (x + s) 2 has Dieudonne module M_i. 
When p = 2 mod 3, the two curves with Weil polynomial x 2 + sx+q have Dieudonne 
modules for two different cube roots of unity ( in the endomorphism ring of 
M, and the curves with Weil polynomial x 2 — sx + q have Dieudonne modules 
for two different sixth roots of unity. When p = 3 mod 4, the two curves with Weil 
polynomial x 2 + q have Dieudonne modules isomorphic to Mi and M_j, for a square 
root i of —1 in the endomorphism ring of M. 

Since our elliptic curves E and E' lie in different isogeny classes, their Dieudonne 
modules are isomorphic to and M v for two distinct roots of unity £ and rj in Z p 2 . 
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It follows that the Dieudonne module for E[p] is generated as a Z^-module by two 
elements w and z that satisfy 

Fw = z, Fz = and Vw = £ 1/p z, Vz = 

for an element £ of ¥ q whose norm to F p 2 is the reduction of £ modulo p. The same 
holds for the Dieudonne module for E' [p] , with £ replaced by an element £' whose 
norm to F p 2 is equal to the reduction of r\ modulo p. 

We showed above that £ could be recovered from the module Mq . The same proof 
shows that £ modulo p can be recovered from the Dieudonne module of E[p], and 
that r\ modulo p can be recovered from the Dieudonne module of E' [p] . Thus the 
two Dieudonne modules are not isomorphic to one another, because the reduction 
map from roots of unity in Z p 2 to elements of F p 2 is injective. □ 

Remark. Consider one of the isogeny classes mentioned above whose Weil polyno- 
mial is neither [x — s) 2 nor (x + s) 2 . It is interesting to note that the two elliptic 
curves in this isogeny class have non-isomorphic Dieudonne modules. It follows 
that any isogeny between these two curves must have degree divisible by p. 



H(-4p) 



9. Proof of Theorem 12.41 

First suppose that q is not a square. Because we are assuming that the charac- 
teristic of Fq is at least 5, there is only one isogeny class of supersingular elliptic 
curves over ¥ q , and its Weil polynomial is x 2 + q. From Sch87, Thm 4.5] we know 
that there are 4p) curves in the isogeny class (up to isomorphism over F g ), 
where H(A) is the Kronecker class number of the discriminant A. Furthermore, 
two curves in the isogeny class are geometrically isomorphic to one another if and 
only if they are twists of one another by — 1 , so the number of distinct j-invariants 
in the isogeny class is H{— 4p)/2. In terms of class number of quadratic orders, we 
have 

'h(-4p)/2 ifp=lmod4; 
h(—p) if p = 7 mod 8; 
2h{-p) ifp=3mod8. 

From this it follows that when p g {5, 7, 13, 37} there are two curves E\,E 2 in the 
isogeny class with distinct j-invariants. Since Ei[2] and Es[2] are isomorphic Galois 
modules and E\ and Ei are geometrically non-isomorphic, we can use Theorem 13. II 
to tie E\ and E2 together along their 2-torsion. 

For the remaining cases, we note that if q is an odd power of a prime p for which 
(— 2/p) = —1, the curve y 2 — x 6 — 5x 4 — 5x 2 + 1 over ¥ q has Weil polynomial 
(x 2 + q) 2 ; this is because over Q its Jacobian is isogenous to the square of the 
elliptic curve with j — 8000, which has complex multiplication by Z[\/— 2]. Since 
the primes 5, 7, 13, and 37 all satisfy (—2/p) = —1, we are done. 

Now suppose that q is a square, and let p be the unique prime divisor of q. 
Recall that there are at most five isogeny classes of supersingular curves over ¥ q ; 
the possible traces of Frobenius are 

if p = 3 mod 4; 
i-y/g ifp=2mod3; 
±2^/q for all q. 
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Suppose the traces s and t of our two elliptic curves do not satisfy s 2 — t 2 . Then 
we are to show that there is no Jacobian isogenous to E± x "Ei. 

We begin with a general observation related to Kani's construction (Theorem l3.1|) . 
If Ei and Eq, are elliptic curves over ¥ q with traces s and t, respectively, and if 
= E2[n] as group schemes over ¥ q , then we must have s = t mod n. We know 
that every Jacobian isogenous to Ei x E% is obtained via Kani's construction for 
some value of n, and the observation we just made shows that this value of n must 
divide s — t. 

Suppose that \s—t\ = yfq. If there were a Jacobian isogenous to E1XE2, it would 
be attainable through Kani's construction for some value of n that divides ,Jq, so 
that this n must be a power of p. But we know from Section [8] that Ei[p] =^ ^[p], 
so there are no Jacobians isogenous to E\ x E2 in this case. 

Suppose that |s — t\ = and that s 7^ —t, so that one of s and t is and 
the other is ±2^fq. Say that s = and t = ±2y/q. Note that the endomorphism 
ring of Ei is isomorphic to Z[i], and the Frobenius on Ei is iy/q; the Frobenius on 
E2 is the integer iy/q. The argument we just gave shows that we cannot obtain a 
Jacobian by gluing together Ei and E2 along their n-torsion when n is a multiple 
of p, so if there is a Jacobian isogenous to Ei x E2 it must be obtained from an 
anti-isometry Ei [2] — > E2 [2] . But the Frobenius of £2 acts as a constant on E2 [2] , 
while the Frobenius of Ei does not, so in particular there are no anti-isometries 
from Ei[2] to E2 [2]. Thus there are no Jacobians isogenous to Ei x E2- 

Suppose that |s — t| = so that one of s and t is ±^/g and the other is 

^f2y/q. Say that s = ±^/g and £ = ^2^/q. Note that the endomorphism ring of 
Ei is isomorphic to Z[cj] for some cube root of unity w, and the Frobenius on Ei 
is ^ujyfq; the Frobenius on E2 is the integer Again we see that we cannot 

obtain a Jacobian by gluing together Ei and E2 along their n-torsion when n is a 
multiple of p, so if there is a Jacobian isogenous to Ei x E2 it must be obtained 
from an anti-isometry Ei [3] — > i?2 [3] . But the Frobenius of £2 acts as a constant 
on £2 [3], while the Frobenius of Ei does not, so again we see there are no Jacobians 
isogenous to E\ xfi 2 . 

Now suppose we have s 2 — t 2 . We must show that there is a Jacobian isogenous 
to Ei xJ?2. There are three cases to consider. 



The case s 2 = t 2 = q. This case arises only when p = 2 mod 3. Let a be a generator 
of F*, and consider the curve C defined by y 2 — x 6 + a. Arguing as in [HLP00| §3], 
we see that the Jacobian of C is isogenous to F\ xf 2 , where F\ is the elliptic curve 
y 2 = x 3 + a and F 2 is the elliptic curve y 2 = x 3 + a 2 . Let F be the elliptic curve 
y 2 = x 3 + 1, let b be a sixth root of a in F g , let ( be the primitive sixth root of 
unity 6 9_1 , and let u) be the order-6 automorphism (x, y) 1— > (( 2 x, ( 3 y) of Eq. Since 
Fq is defined over F p , its Frobenius endomorphism over F g is either y/q or —yfq. 
It is easy to see that F\ is the twist of Fq by u> and that F2 is the twist of Fq by 
ijj 2 , and it follows that Fi and F2 have traces of opposite sign, and they both are 
square roots of q. 

Similar reasoning shows that the Jacobian of the curve y 2 = x 6 + a 2 is isogenous 
to either Fi x F± or F2XF2; furthermore, whichever product of elliptic curves we get 
from y 2 = x e + a 2 , we get the other product from the quadratic twist ay 2 = x 6 + a 2 . 

Thus, whenever s 2 — t 2 — q there is a Jacobian isogenous to Ei x E 2 - 
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The case s 2 = t 2 = 0. This case occurs only when p = 3 mod 4. Let Fq be the 
elliptic curve over ¥ q defined by y 2 = x 3 — x, so that j(Fo) = 1728 and Fq has 
an automorphism i of order 4. The two elliptic curves F\ and F% over ¥ q with 
trace are the twists of Fq by i and by —%. Let us fix, once and for all, two ¥ q - 
isomorphisms ipi : Fq — > f\ and y>2 : Fo ~ * £2- Using these isomorphisms, we will 
identify geometric points of F\ and F2 with geometric points of Fq, and we will 
identify the geometric automorphism groups of F% and F2 with Aut£o. Let s be 
the positive square root of q, and reindex the curves if necessary so that the q-power 
Frobenius on F% is equal to si. Then the Frobenius on £2 is equal to —si. 

We will show that there is a Jacobian isogenous to F\ x F2 by gluing the two 
curves together along their 4-torsion subgroups, as in Theorem 13.21 

Let P be a geometric point of Fq such that P and iP generate £b[4]. Let Q = iP. 
Let i/j be the isomorphism £i[4] — > £2 [4] that sends fi{P) to </? 2 (£-|-2(2) and (f%(Q) 
to cp 2 (2P— Q). It is easy to check that rp is a Galois-equivariant anti-isometry with 
respect to the Weil pairing. We will be finished if we can show that neither condition 
(a) nor condition (b) of Theorem 13.21 holds. 

We know that F\ and F2 are both elliptic curves with j-invariant 1728. Let 
&3(jif) G ^b'; f] be the classical modular polynomial for 3-isogenies. We compute 
that 

$ 3 (172 8, 1728) = 2 36 • 3 6 • 7 8 • ll 4 , 

so when p > 11 there are no geometric 3-isogenies from F\ to F2, and condition 
(a) of Theorem 13.21 does not hold. For p = 7 and p = 11, we can explicitly write 
down all 3-isogenies from Fq to Fq and note that none of them induce the given 
anti-isometry ip from F\ [4] to F2 [4] . 

If condition (b) of Theorem 13.21 were to hold, there would be two order-2 sub- 
groups G\ and G2 of Fq [4] and an automorphism a of Fq such that 

P + a(P + 2Q) e Gi P-a(P + 2Q)eG 2 
Q + a{2P-Q)eG 1 Q-a{2P-Q)eG 2 

Note that the only automorphisms of Fq are ±1 and ±i. We check that P + a(P) is 
a 2-torsion element only when a = ±1. But if a = 1 then we find that Gi contains 
both 2P + 2Q and 2P, a contradiction, while if a = — 1 then Gi contains both 2Q 
and 2P + 2Q, another contradiction. Thus, condition (b) of Theorem 13.21 does not 
hold. It follows that there is a Jacobian with Weil polynomial (x 2 + q) 2 . 

The case s 2 = t 2 = 2q. Note that the Galois group of ¥ q /¥ q acts trivially on both 
Ei [2] and E2 [2] , because for each curve the Frobenius endomorphism is either ^fq 
or — Jq. There are therefore six Galois-equivariant anti-isometries E\[2] — > £?2[2]. 
Since we are not in characteristic 2 or 3, the number of isomorphisms E\ — > E2 
is at most 6, and in the case that there are 6 isomorphisms, there are only 3 
induced isomorphisms Ei[2] — * £^[2]. Thus, at least one of the six anti-isometries 
Ei[2] — > £2 [2] is not reducible, so there is a Jacobian isogenous to E\ x _E 2 . □ 

Part 2. Simple supersingular abelian surfaces as Jacobians 

10. Introduction 

Let k = ¥ q be a finite field of characteristic p > 3, and let .A be an isogeny 
class of simple supersingular abelian surfaces over k that split over the quadratic 
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(a,b) 


Conditions on p 


Conditions on q 


(0,0) 


p ^ 1 mod 4 




(0,9) 


p ^ 1 mod 3 


q nonsquare 


(0,-q) 


p ^ 1 mod 3 




(0,~2q) 




q nonsquare 


(0,2q) 


p = 1 mod 4 


q square 



Table 3. Simple supersingular isogeny classes over ¥ q that split 
over ¥ q 2. The characteristic p of ¥ q is assumed to be at least 5. 



extension of k. In this part of the paper we determine whether or not there is a 
Jacobian in A. 

In |MN02[ Table 1] we find a list of all simple supersingular isogeny classes of 
abelian surfaces defined over a finite field, with an indication of the smallest field 
extension over which each class splits. We present in Table [3] the isogeny classes 
over finite fields ¥ q of characteristic p > 3 that split over ¥ q 2 . Theorem 11.41 shows 
that these classes are all principally polarizable. We will show that all of these 
isogeny classes contain Jacobians, except for one special case. 

Theorem 10.1. Let A( a ,b) be an isogeny class of simple supersingular abelian sur- 
faces over a finite field ¥ q of characteristic p > 3. Then -4( a ,fc) does not contain a 
Jacobian if and only if q is a square, p = 11 mod 12, and (a, b) = (0,—q). 

This part of the paper is organized as follows. In Section [IT] we review re- 
sults of Oort |Oor75j . Katsura and Oort |KQ 87j. and Ibukiyama, Katsura, and 
Oort [IKQ86] on supersingular abelian surfaces over the algebraic closure of a finite 
field, paying special attention to the principal polarizations of these surfaces. In 
Section [12] we look at supersingular surfaces over finite fields and determine which 
of their geometric principal polarizations can be defined over the base field. Finally, 
in Section [13] we use the results of Section [ITJ and [12] together with some explicit 
constructions, to prove Theorem llO.il 

11. Supersingular surfaces, quaternion lattices, and polarizations 

In this section we review some results of Oort |Oor75) , Katsura and Oort |KQ87j , 
and Ibukiyama, Katsura, and Oort [IK086J on supersingular abelian surfaces, 
quaternion hermitian forms, and polarizations. The results on abelian surfaces 
assume that the base field is algebraically closed; we will consider the case of finite 
base fields in Section [T2l 

11.1. Supersingular abelian surfaces. Let E be an elliptic curve over ¥ p with 
trace 0, so that E is supersingular and all of the geometric endomorphisms of E 
are defined over F p 2 . Let K be the algebraic closure of F p and let O be the K- 
endomorphism ring of E; the algebra B — O <£> Q is a definite quaternion algebra 
over Q with discriminant p, and O is a maximal order in B. We will denote the 
canonical anti-involutions of O and B by x i— > x. 

Let 7r denote the p-power Frobenius endomorphism on E, and fix a if -isomorphism 
between E[n] and ct p , where a p is the unique local-local group scheme over F p ; then 
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we can identify Houik {a p , E) with EndA'(a p ) = K. The kernel of the restriction 
map 

~:Endjf(E)->Endjf(a p ) 

U U — u\ ap 

is a two-sided prime ideal ?fi of above p, with residual degree 2. The restriction 
map thus gives a natural embedding O/^p ► Endx(a p ) = A with image F p 2 . Since 
7r 2 = — p, the prime ideal is principal and generated by tt. 

For every <E A 2 , we denote by the abelian surface over K given by the 
following diagram: 

-> a p E x E ^ Ai 3 — > 0. 

It is easy to check that 

Aij =Ai>j> (i,j)(a p ) = (i',j')(a p ) 

3a € A"* such that (i',f) — a(i,j). 

Thus, the set of all (apart from Aqq = E x E) is parameterized by P 1 (AT). 

For every i £ K the composition a p — E — ^> A corresponds to the element i u 
of K. For every endomorphism a E End^-(£' x E) = M^O) and every [i : j] G 
P 1 (A"), the composition 

a„ ► E x E — ► E x E 



has the same image as the element a[i : j] <E P 1 (A'), where a £ M2(F p 2) is obtained 
by reduction modulo of the entries of a, and the action of M2(F p 2) on P 1 (A') is 
the usual projective action. 

If A is an abelian surface over K we denote by a (A) the quantity 

a(A) = dimHom^(a p , A), 

sometimes called the a-number of A. When A is a supersingular abelian surface 
we have a(A) G {1,2}. The value of a(A) gives us information about the global 
structure of A, as the following result shows. 

Proposition 11.1. We have a(A) = 2 if and only ifA = ExE. We have a(A) = 1 
if and only if A = A^ for some [i : j] G P 1 (A") \P 1 (F p 2). Furthermore, if a(A) = 1 
then a(A/a p ) = 2. 

Proof. This follows from [Oort 75, Introduction], [Oort 75, Thm. 2], and [Oort 75, 
Cor. 7]. □ 

11.2. Quaternion hermitian forms and lattices. Most of the material that we 
present without reference in this section can be found in [Shi63 . 

Let B be a definite quaternion algebra over Q with discriminant p. There is a 
positive definite hermitian form on the right B- module B 2 , which is unique up to 
base change over B] it is given explicitly by ^2 xlVii where x ^ x is the standard 
involution on B. For every prime t (possibly equal to p) we set Bg = B®Qi. Then 
the hermitian form on B 2 extends to give a hermitian form on B 2 . Let f denote 
the conjugate-transpose involution on M2{B) and on M2(B{), where 'conjugation' 
means the standard involution. Then the groups of similitudes of the hermitian 
forms on B 2 and on B 2 are given by 

G = {ge M 2 (B) | gig = n(g)I for some n(g) G Q*} 
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and 

G e = {g e M 2 {B e ) | g^g = n(g)I for some n(g) G Q|}. 

Let O be a maximal order of £?. A Z-lattice L in B 2 is called a (right) O-lattice if 
L is a right O-module. Two O-lattices L\ and Li are globally equivalent if Li = g_L 2 
for some g <G G, and are locally equivalent at £ if Li <g> Z^ = g(-L 2 <8> Z^) for some 
g € G^. One denotes by Aut(L) = {g S G | gL = £} the automorphism group of L 
and by Aut'(L) = Aut(L)/±l the reduced automorphism group of L. These groups 
are finite because the hermitian form on B 2 is positive definite. 

A genus of O-lattices is a set of O-lattices in B 2 that are equivalent to one 
another locally at every prime i. There are only two genera: the principal genus 
£ 2 (p, 1) that contains the right O-lattices in B 2 that are equivalent to Of for all £, 
and the non-principal genus £ 2 (l,p) that contains the right O-lattices in B 2 that 
are equivalent to O 2 for all £ ^ p and equivalent at p to 

(1) £ ( J ° ) °l> where ^ e GL 2 (O p ) satisfies ^ = ( J J 

with 7r a prime element of O p . One denotes by H%(p, 1) the (finite) number of global 
equivalence classes in Cz(p, 1), and by H2(l,p) the number of global equivalence 
classes in £2(1, p)- 

On the other hand one can define two special sets of positive definite hermitian 
matrices. Let *p be the two sided prime ideal of O above p. 

Definition 11.2. We define A prmc to be the set of matrices H in GL 2 (0) such 
that 

H = I t r ,\ with st — rf= 1 , 
V i ) 

where s and t are positive integers. We define A nprmc to be the set of matrices H 
in M 2 (0) such that 

H = I _ J with p 2 st — rf = p, 



r pt 

where s and t are positive integers and where r € ty. 

Two matrices Hi , H2 that both lie in A prmc or in A nprmc are said to be equivalent 
if there exists an a e GL 2 (0) such that a^H ia = H 2 . For H in A princ or A nprinc , 
we let 

Aut(.ff) = {a e GL 2 (0) I c^Hct = H] 

be the automorphism group of H and Aut'(iJ) = Aut(-ff)/ ± 1 the reduced auto- 
morphism group of H. These groups are again finite. 

One can relate lattices and hermitian forms in the following way. 

Proposition 11.3. There are bijective correspondences 

'global equivalence classes 1 (equivalence classes 



global equivalence classes i f e< 

of lattices in £ 2 (p, 1) J \o 



and 



>f matrices in A princ 



{global equivalence classes 1 f equivalence classes 

of lattices in £ 2 (l,p) J \o/ matrices in A nprmc 
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that preserve automorphism groups and reduced automorphism groups, as abstract 
groups. 

Proof. The bijective correspondences are provided by Lemmas 2.3 and 2.5 of [LK086J 
in the principal case, and by Lemmas 2.6 and 2.7 of [IKQ86] in the non-principal 
case. The fact that the bijections provided by these lemmas preserve automorphism 
groups is easily seen from the proofs of the lemmas. □ 

The automorphisms a of the hermitian forms in A npnnc are determined (up to 
±1) by the projective action of a. This fact is probably well-known, but for lack of 
a suitable reference we include a short proof. 

Lemma 11.4. Let T C GL2(C) be a finite subgroup of order prime to p. Then 
reduction modulo *P determines an embedding ~ : T <— > GL2 (F p 2 ) . 

Proof. If a G T is the identity modulo *p, then a is an element of the multiplicative 
group 1 + 7rAf 2 (0). This group has no torsion element of order prime to p, so we 
must have a = 1. 

More explicitly, every element of the group 1 + "kMi{0) can be written in the 
form 1 + tt n M, with N > and M €" Ma^P). Thus, for every positive integer n 
we have 

(1 + ir N M) n = 1 + nw N M mod % 2N , 

and if n is prime to p we cannot have (1 -I- tt n M) n = 1, since mr M mod 
<# 2N . □ 

Proposition 11.5. Let H be an element of A nprinc and let T C Aut(iJ) be a 
subgroup of order prime to p. Then reduction modulo gives embeddings 

r^SL 2 (F p2 ) and T/{±1) ^ PGL 2 (F p2 ). 

Proof. By the above lemma, we need only check that det(5) = 1 for all a £ Aut (if). 
Put H = x^x for some x G GL2(B) and let L = xO 2 be the lattice in the non- 
principal genus attached to H as in Proposition 111.31 Since the lattice L ®7L V is 
equivalent to the lattice given in ([1]), there exist g G G p and (3 G GL2(O p ) such 

that x = g£ ^ [3. We compute that 

Let 7 = fiafj^ 1 . Then from if = cv Ha we find that 

t / ^\ { 7T 

( 2 ) 7 T _ „ n 7 



7T OJ 1 \-TT 

Since 7 and /? lie in GL2(O p ), we can reduce them modulo *p as well; thus, it is 
sufficient to check that det(7) = 1. Now, jtt = 717' with 7' = 7. Hence, we can 
cancel n in both sides of ([2|) to get 

(V)'(-°, ; 

and this implies that 7 belongs to the symplectic group and has determinant equal 
to 1. □ 
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Katsura and Oort determined the groups that can occur as the reduced auto- 
morphism group of a hermitian form in A nprinc (see |KQ87l and |Ibu89l Lem. 2.1]). 
This result will play a crucial role in our strategy. 

Theorem 11.6. If p > 7, then the reduced automorphism group of a hermitian 
matrix in A nprmc is isomorphic as an abstract group to one of the following groups: 

Z/nZ /or some n G {1,2,3}; for some n £ {2,3,6}; A4; S4; A5. 

If p = 3 or p — 5, then H{l,p) = 1 and the reduced automorphism group of the 
single class is isomorphic to Aq when p — 3 and to PGI^Fs) when p = 5. 

Given a monic polynomial / S Z[x] and a subgroup T of GL2(£>), let Tf de- 
note the set of elements of T whose reduced characteristic polynomials (as elements 
of M2(B)) are equal to /. For each possible reduced automorphism group T' of 
a hermitian matrix in A nprmc , Ibukiyama Ibu89, Thm. 7.1] determined the car- 
dinality of the set of equivalence classes of hermitian matrices H 6 A nprmc with 
Aut'(if) = r'. An important ingredient in this computation is the determination 
of mass formulas for the number of elements in T f for all T and /. Given a monic 
degree-4 polynomial / G Z[x], we define m(/) to be the quantity 



where h — H(l,p) is the number of classes in A nprinc and where the I\ are the au- 
tomorphism groups of a set of representatives for the equivalence classes of A nprmc . 
Ibukiyama computed the masses m{f) explicitly ( [Ibu891 Thm. 2.2]). 

Theorem 11.7. Assume that p > 7. Then m(f) — for all polynomials f G 1\x\ 
except for those with f{x) or f(—x) belonging to the following list: 



Moreover, m(/2) > for all p > 7, and 

m (fi) > if and only if p = 3, 5 mod 8, 

TO (/e) > if and only if p = 5 mod 12. 

Remark. There is a similar result in the principal genus case; sec |HI80, Part I]. 

11.3. Polarizations. Later in the paper we will need to understand the principal 
polarizations on the supersingular abelian surfaces over the algebraic closure K of 
a finite field F g . In this section we present the relevant results. 

Recall that in Section 111.11 we chose a trace-0 elliptic curve E over F p . The 
if-endomorphism ring O of E is a maximal order in the quaternion algebra B over 
Q with discriminant p. 

Let Ao be the product principal polarization on E x E and let f be the Rosati 
involution on End/^(i? x E) associated to this polarization. It is well-known that 
under the natural isomorphism End/<-(i? x E) = M2(0), the Rosati involution 
becomes the conjugate-transpose involution. 

The polarization Ao induces an injection from the Neron-Severi group NS(i? x E) 
to End/f (_E x E) by A 1— > A " 1 A. The image of this map is also well-known (see for 




fi = (x- l) 4 , 
f 4 = x 4 + 1, 




/ 3 = (z 2 + z + l) 2 , 

fe = x 4 -x 2 + l. 



instance |IKQ861 Prop. 2.8]). 
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Proposition 11.8. The map given above induces a bijection between NS(E x E) 
and the set of hermitian matrices in M2(0). Moreover, this map restricts to a 
bijection between the set of principal polarizations on E x E and A pnnc . 

We can understand in a similar way the principal polarizations of the super- 
singular surfaces that are not geometrically isomorphic to E x E. Let A be a 
supersingular abelian surface with a(A) — 1, and let ip be the natural degree-p 
isogeny from E x E to A (see Mll.lf) . Then we can define a map NS(^4) — > A'hiO) 

Proposition 2.14 of IK086 tells us the following. 

Proposition 11.9. The map given above induces a bijection between the set of 
principal polarizations on A and the set A nprinc . 

12. Supersingular surfaces over finite fields. 

Let k = F q be a finite field of characteristic p that has even degree over ¥ p , and let 
K = ¥ q . In this section we answer some basic questions concerning supersingular 
abelian surfaces over fc, their isogeny classes, and their principal polarizations. 

Suppose A is a supersingular abelian surface over k. If a(A) — 2 then A is a 
JC/fc-twist of the abelian surface E x E, where, as before, E is a trace-0 elliptic 
curve over F p . On the other hand, if a (A) — 1 then there is a unique copy of a p in 
A, which must necessarily be defined over fc, and by Proposition II 1 . ll the quotient 
A/ctp has a-number 2. Therefore, every A is either a K/k twist of E x E or a 
quotient of such a twist by a rank-p subgroup. In particular, every isogeny class of 
supersingular surfaces over k contains a K/k-twist of E X E. 

Thus, to understand the supersingular abelian surfaces over k and their principal 
polarizations, we need only answer the following questions: 

• What are the if/fc-twists of E x E, and what are the Weil polynomials of 
these twists? 

• Which rank-p geometric subgroups of these twists can be defined over fc? 

• Which geometric polarizations of these twists can be defined over fc? 
In this section we will answer these questions. 

Remark. We could ask the same questions for arbitrary finite fields instead of 
limiting ourselves to those that contain ¥ p 2 , but we will only need the answers for 
even-degree extensions of ¥ p , and the answers for odd-degree extensions of ¥ p are 
slightly more awkward to state. The answers are simpler for the fields that contain 
F p 2 because for these fields the Galois group of K/k acts trivially on End_R-(i? x E). 

The first of our three questions is easy to answer. We know that the twists of Ex 
E correspond to elements of the cohomology set H 1 (Gal(K/k), Autic(E x E)), and 
since all of the geometric endomorphisms of E are defined over fc, this cohomology 
set consists of the conjugacy classes of the elements of finite order in Aut(U x E). 
If A is a twist of E x E, and if f : E x E ^ A is & geometric isomorphism, then 
a := f^ 1 f a is the automorphism of E x E that corresponds to the twist A; here a 
is the Frobenius automorphism of K/k. 

Let 7T be the g-power Frobenius on E x E and let tta be the g-power Frobenius of 
a twist A of Ex E. The pullback of 77,4 via the geometric isomorphism / is equal to 
an, so that 77,4 and an have the same characteristic polynomial. Since 77 = iy/q is 
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an integer in End_R-(A x E), the characteristic polynomial of tta is 7r 4 /i(x/7r), where 
h G Z[x] is the characteristic polynomial of a. The same argument is valid in a 
more general situation: 

Proposition 12.1. Let A and B be abelian surfaces over k with q-power Frobenius 
endomorphisms tta and ttb, respectively. Let f: B — ► A be a K -isomorphism and 
let h € Z[x] be the characteristic polynomial of a — f~ 1 f a G Autjf(B). If ttb ac -t s 
as an integer on B then the characteristic polynomial of tta is 7Tgh(x / 'it b) ■ 

We turn to the second question. Given (i,j) G K 2 with (i,j) ^ (0, 0), we would 
like to know whether the subgroup f((i,j)(a p )) of A is definable over k. 

Proposition 12.2. The subgroup f((i,j)(a p )) of A is definable over k if and only 
if [i : j] and a[i a : j a ] are equal in P 1 ^). 

Proof. The morphism / o a p — > A is defined over k if and only if it is 

invariant under the action of the Galois group of K/k, so we have 

f°(i,3)=r°(i°,r) <=> (<,j)=ao(i',f) <=> [i:j]=dc^ :f\. 

□ 

It will also be useful to know when we can be assured of the existence of a 
rational local- local subgroup of A that gives rise to a quotient with a- number 1 . By 
Proposition 1 1 1 . 1 1 we need [i : j] G ¥ 1 (K)\¥ 1 (¥ p 2) such that the morphism fo (i,j) 
is defined over k. 

Proposition 12.3. Let H G A nprmc and let a G Aut(-ff) be an automorphism of 
order not divisible by p. Then there exists an element [i : j] G P 1 ( A") \ P 1 (F p 2 ) such 
that [i : j] — a[i a : unless q = p 2 and a = ±1. 

Proof. The equation [i : j] = a[i q : j q ] can be rewritten as a homogeneous equation 
in i and j of degree q+1, and it is easy to verify that the subscheme of P 1 defined 
by this equation is nonsingular, so there are q + 1 points [i : j] that satisfy the 
equation. If q > p 2 , we are guaranteed a solution that does not lie in P 1 (F p 2). If 
q = p 2 and every element of P 1 (¥ p 2 ) is a root of the equation, then we see that a 
fixes every element of P 1 (F p 2), and Proposition 1 1 1 . 51 shows that a = ±1. □ 

The third of our three questions asks when a geometric polarization of E x E 
gives rise to a polarization of A defined over k. 

Proposition 12.4. Let X be a polarization ofExE and let H = Aq : A G End^Ex 
E). Then the polarization f~ 1 \f~ 1 of A is defined over k if and only if H — cr Ha. 

Proof. The polarization will descend to A if and only if it is fixed by the action of 
a, that is, if and only if 

(pA/- 1 )' = pA/- 1 . 

Multiplying by f a on the right and by f a on the left, we find that this condition is 
equivalent to 

a = PT-xf^r. 

This translates into the statement that H = a^Ha. □ 
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(n, n') 


fn,n' 


(1,1) 




(2,1) 


(x + l) 4 


(2,2) 


(x- l) 2 (x + l) 2 


(3,3) 


(a; 2 +a; + l) 2 


(4,2) 


(x 2 + l) 2 


(5,5) 


x 4 + X 3 + x 2 + X + 1 


(6,3) 


(x 2 - X + l) 2 


(6,6) 


(x 2 - x + l)(x 2 +x + 1) 


(8,4) 


x 4 + l 


(10,5) 


x 4 — x 3 + x 2 — a; + 1 



Table 4. Characteristic polynomials of certain automorphisms of 
supersingular Jacobians. 

13. Jacobians in isogeny classes of simple supersingular surfaces 

In this section we will prove Theorem 110.11 The techniques we use depend 
on whether or not the base field k = ¥ q has even degree over its prime field, so 
we consider these cases in two separate subsections. Throughout this section we 
will let K denote an algebraic closure of fc, and we will always assume that the 
characteristic of k is greater than 3. 

13.1. The case q a square. We first show how certain Weil polynomials can be 
produced by Proposition ll2.ll We begin with a simple observation: Suppose u is an 
automorphism of a hyperelliptic curve C, and let l be the hyperelliptic involution 
of C. Then u induces an automorphism u' of the genus-0 curve C/(l), and the 
order of v! is equal to the order of u unless l G (u) , in which case the order of u' is 
half that of u. 

Proposition 13.1. Let k = ¥ q be a finite field (of characteristic at least 5) that has 
even degree over its prime field. Let C be a supersingular genus-1 curve over k such 
that the Frobenius endomorphism 7r of the Jacobian J of C is equal to the integer 
e^/q, where e = ±1. Let u be a geometric automorphism of C and let u' be the 
induced automorphism o/P . Let n and n' be the orders of u and u' , respectively, 
and let C be the twist of C determined by u. Then the pair (n, n') appears in the 
left column of Table ^ and the Weil polynomial of C is q 2 f n ,n'(£x/ ^fq), where 
fn,n' is the polynomial appearing in the right column. 

Proof. Igusa |Igu60[ §8] computed the groups that can occur as the reduced au- 
tomorphism groups of hyperelliptic curves. Looking at Igusa's list, we see that n' 
must be an element of {1, 2, 3, 4, 5, 6}. Since n is equal to either n' or 2n', we see 
that the left column includes all possibilities except for n = 4, n 1 = 4 and n = 12, 
n' = 6. These cases can be excluded by computing the automorphism groups of 
Igusa's curves with many automorphisms. 

Now Proposition 113.11 will follow from Proposition 112.11 provided that we can 
show that the characteristic polynomial g of the automorphism u* of J is equal to 
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the polynomial / associated to the pair (n, n'). Four facts will be very helpful in 
our proof that g = f: 

(1) The gcd of g and x n — 1 does not divide x m — 1 for any m < n. 

(2) If n = 2n', the gcd of g and x n + 1 does not divide x m + 1 for any m < n'. 

(3) If n = n', the gcd of g and x n — 1 divides no polynomial of the form x m + 1. 

(4) The constant term of g is 1. 

The first three facts follow from the definitions of n and n! and from the fact that 
u* satisfies the relevant gcd in each case. The fourth fact holds because u* is an 
automorphism of the polarized Jacobian, and so its product with its Rosati involute 
is equal to 1. 

These four facts allow us to determine g in all cases, except when n = 3 or n = 6. 
Consider the case when n = 3. Then g must be either 

{x-lf, (x- \) 2 {x 2 +x + 1), or {x 2 + x + lf. 

The first possibility is eliminated by fact (1) above. If g were equal to the second 
polynomial, then Proposition ll2.1l would show that the Weil polynomial of C would 
be 

(x 2 — 2sx + q)(x 2 + sx + q) 

for some s with s 2 = q. But Theorem 12.41 shows that there are no curves with such 
a Weil polynomial. It follows that g = (x 2 + x + l) 2 , as claimed in the table. The 
cases with n = 6 follow in a similar way. □ 

Remark. Suppose u is an order-n automorphism of a genus-g hyperelliptic curve 
over an arbitrary algebraically-closed field, and let n' be the order of the automor- 
phism of P 1 induced by u. In future work, we will show that if g is even or if n 
is odd, then the characteristic polynomial of u* is completely determined by the 
values of g, n, and n' . This result provides a much more conceptual way of deriving 
Table H 

We continue to let E denote an elliptic curve over ¥ p with trace 0. The following 
propositions will help us detect the existence of Jacobians among the supersingular 
surfaces A that have respectively a(A) = 2 or a(A) = 1. 

Proposition 13.2. Let C be a supersingular genus-2 curve over k whose Jacobian 
has a-number 2. If C is a twist ofC, then the Weil polynomial of C is q 2 f{x/y/q) 
for some f — f n .n' from Table^Q Furthermore, C has a twist with Weil polynomial 
q 2 fn,n' (x I \fq) if and only if there is a geometric automorphism u of C of order n 
that induces an automorphism of order n' on the projective line. 

Proof. Since the principally polarized surface JacC has a-number 2, it is geomet- 
rically isomorphic to (E x E, A) for some principal polarization A. Now, (E x E, A) 
is defined over F p 2, hence over ¥ q , and it is fc-isomorphic to the canonically po- 
larized Jacobian of a curve Co defined over k. By Torelli's theorem, Co is a twist 
of C. Replacing Co with its quadratic twist, if necessary, we may assume that the 
Frobenius on Jac Co acts as yfq. 

The proposition is now a direct consequence of Proposition 1 1 3 . ll because C and 
Co have the same set of twists, the g-power Frobenius endomorphism ttq of the 
Jacobian of Co satisfies ttq = ^/q, and any isomorphism between the curves C and 
Co induces an isomorphism between their geometric automorphism groups that 
identifies the hyperelliptic involutions. □ 
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Proposition 13.3. Let A be the isogeny class *4(o,2q) (respectively Afo,o)> respec- 
tively A(Q^- q )), and let P £ Z[x] be the polynomial (x 2 + l) 2 (respectively x 4 + 1, 
respectively x 4 — x 2 + 1). Then there exists an H £ A nprmc wii/i an automorphism 
a £ Aut(iJ) swc/i i/iai P(a) = if and only if there exists a curve C over k whose 
Jacobian lies in the isogeny class A and has a-number 1. 

Proof. Suppose H is an element of A nprmc and a is an element of Aut(TJ) with 
P(a) — 0. Let A be the K/k-twist of E x E determined by a. Then by Propo- 
sition 112.11 we see that A lies in A. By Propositions 111.11 112.21 and 112.31 there is 
a fc-rational a p -subgroup G of A such that a(A/G) — 1. Now we apply Proposi- 
tion 111.91 to the degree-p map 

tp: E x — > A/G. 

There is a principal polarization A of A/G whose pullback by ip is the degree-p 2 
polarization XqH of E x E, where Ao is the product principal polarization on fix E. 
Proposition 112.41 shows that the pullback of A to A is defined over k; hence, A is 
defined over k. The principally polarized variety (A/G, A) is not geometrically a 
product of elliptic curves (because a(A/G) = 1), so it is the Jacobian of a curve. 

Conversely, suppose that C is a curve over k whose Jacobian J has a-number 
1 and belongs to A. Consider the quotient J/a p of J by its unique a p -subgroup, 
and let / be a geometric isomorphism E x E — > J / 1 a p (which exists by Proposi- 
tion [TTTT]). Apply Proposition II 1 .91 to the degree-p map 

(p: E x E J/a p — > J, 

where the rightmost map is the dual isogeny of the canonical projection. There is 
some H £ A nprmc uniquely associated to the canonical polarization d of J. Since 
d is defined over fc, Proposition 112.41 shows that the automorphism a = f~ 1 f a 
lies in Aut(H). Finally, by Proposition 1 1 2 . 1 1 the characteristic polynomial of a is 
determined by the class A as indicated in the statement of the proposition. □ 

Now we proceed to the proof of Theorem 110.11 in the case that q is a square. 
Consulting Table [H we see that we must show that there are Jacobians in -<4(o,o) 
when p ^ 1 mod 4, that there are Jacobians in -4(o.2<j) when p = 1 mod 4, and that 
when p ^ 1 mod 3 there are Jacobians in ^(0,-9) if an d only if p = 1 mod 4. 

The isogeny class -4(o,2<7) when p = 1 mod 4. For p > 5 we deduce from Theo- 
rem 111.71 the existence of a hermitian form H £ A nprinc that admits an automor- 
phism a satisfying (a 2 + l) 2 = 0. By Proposition 113.31 there is a Jacobian in the 

Class -4(0,2g)- 

For p = 5 (or more generally for p = 5 mod 8), we can use the curve C given 
by the equation y 2 = x 5 — x. By [IK086, Prop. 1.12], this curve is supersingular 
and its Jacobian has a-number 2. Moreover, the automorphism u given by (x, y) 1— > 
(—x, Ty) satisfies u 2 — l. By Proposition 1 13. 21 the Jacobian of some twist of C 
lies in A^ 2q )- 1=1 

The isogeny class -4(o.o) when p ^ 1 mod 4. First we consider the case p = 7 mod 8. 
Let C be the curve y 2 — x 5 — x. By [IK086, Prop. 1.12] we know this curve is 
supersingular and its Jacobian has a-number 2. Moreover, C has a geometric 
automorphism u satisfying u 4 = l\ for instance, (x,y) 1— > (( 2 x,(y), where C, is a 
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primitive eighth root of unity. By Proposition 113.21 the Jacobian of some twist of 
C lies in -4(0,0) • 

Next we consider the case p = 3 mod 8. In this case Theorem 111.71 shows that 
there is a hermitian form H in A nprmc that has an automorphism a whose char- 
acteristic polynomial is x A + 1 . By Proposition 113.31 there is a Jacobian in the 
class -4(o,o) ■ D 

The isogeny class _4(o._ 9 ) when p ^ 1 mod 3. We must show that there is a Jacobian 
in this isogeny class if and only if p = 5 mod 12. 

To begin with, we note that Proposition 113.21 shows that there is no curve whose 
Jacobian lies in „4( ,-<j) and has a-number 2. On the other hand, we see from 
Proposition 113.31 that there will be a curve C over k whose Jacobian lies in _4( ,-g) 
and has a-number 1 if and only if there exists an H £ A nprmc for which there is an 
a 6 Aut(-ff) satisfying a 4 — a 2 + 1 — 0. By Theorem 111.71 for p > 5 this happens 
if and only if p = 5 mod 12. 

For p — 5 we note that the matrices H in the unique equivalence class in A nprinc 
have reduced automorphism group PGL^Fs) (see Theorem 1 11.6[) . This group con- 
tains an element of exact order 6 that lifts to an a £ Aut(H) that must satisfy 
a 6 = — 1. In fact, the reduced characteristic polynomial of a is a power of the 
minimal polynomial; hence a e — 1 would imply that a has order 1, 2 or 3 in the 
reduced group. □ 

Remark. The proof that there is no Jacobian with a-number 1 in .4(0,— g ) is also 
valid for p = 3. There is no element of order 6 in the reduced automorphism group 
of the unique equivalence class in A nprmc ; in fact, by Theorem 111.61 this reduced 
group is isomorphic to Aq. 

13.2. The case q not a square. We see from Table |3] that to prove Theorem llO.il 

in the case where q is not a square, we must show that there are Jacobians in -4(o,o) 
when p ^ 1 mod 4, in -4(o, 9 ) when p ^ 1 mod 3, in -4( 0j _ g ) when p ^ 1 mod 3, and 
in -4(o, -2 9 ) for all p. 

We begin with a remark about twists. Suppose that V is a variety over k = ¥ q 
all of whose automorphisms are defined over F ? 2, and let a denote the Frobenius 
automorphism of K over k. Let a be an automorphism of V. Then there is a 1- 
cocycle from Gal(K/k) to Autx (V) that sends er to a if and only if aot a has finite 
order in Autx(V r ). (Note that the latter condition is equivalent to a 'a having 
finite order, and that the orders of a a a and aa a are equal to one another.) As 
always, the Kj fc-twists of V correspond to elements of the pointed cohomology set 
^(GaliK/k), Aut K (V))- If V is a twist of V and / : V -> V is a AT-isomorphism, 
then V corresponds to the class of the cocycle that sends a to /~ 1 / <T . 

The following proposition, similar to Proposition 1 13 . 21 allows us to construct 
twists in certain isogeny classes. 

Proposition 13.4. Let C he a supersingular genus-2 curve over k such that the 
Frobenius endomorphism n of the Jacobian satisfies ir 2 — eq, where e — ±1. Letu be 
a geometric automorphism of C such that uu a has order n G {1,2,3, 4, 6} and let C 
be the twist of C determined byu. Then the Weil polynomial x' k +ax 3 +bx 2 +aqx+q 2 
of C" is determined by n as follows: 



n 


1 


2 


3 


4 


6 


(a,b) 


(0, -2eq) 


(0,2eg) 


(0,eg) 


(0,0) 


(0, -eg) 
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Proof. Let J be the Jacobian of C. Then the Jacobian J' of C is the twist of J 
associated to the automorphism a = u*. Note that aoF has order n. 

Let 7r £ Endif (J) and n' £ Endj<-(J') be the g-power Frobenius endomorphisms 
of J and J', respectively and let /: J — > J' be a geometric isomorphism such that 
a = The condition on 7r implies that J splits over the quadratic extension 

of k, and the condition (aa")™ = 1 implies that / is defined over the extension of k of 
degree 24; in particular, the isogeny class of J' splits over this extension. Checking 
the list of supersingular isogeny classes over odd-degree extensions of prime finite 
fields of odd characteristic that split over the extension of degree 24 (see [MN02, 
Thm. 2.9] and }MN02[ Table 1]), we see that the characteristic polynomial of tt' is 
x 4 + bqx 2 + q 2 for some integer b £ {0, ±1, ±2}. 

The pullback of tt' by / is an. Since ir 2 — eq and a a n — net, this implies that 

(aeff + ebaa tx + 1 = 

in Endif (J). Comparing this identity with (aa')™ = 1, we see that b — — 2e, 2s, e, 
or — e, according to n = 1, 2, 3, 4 or 6. □ 

The isogeny classes -4.(o,±q) when p ^= 1 mod 3. Let C be the curve y 2 = x 6 + 1 
over k, and let E be the supersingular elliptic curve y 2 = x 3 + 1. The two obvious 
maps from C to E show that the Jacobian J of C is (2, 2)-isogenous to 23 x E 
over fc, so the Frobenius tt of J satisfies 7r 2 = — </. 

Let C £ -RT be a primitive sixth root of unity, and let u be the -ftf-automorphism 

(x,y) >-> (C/x,y/x 3 ) 

of C. One checks easily that (u a u)(x,y) = (C 4 xX 3 y)', hence, [u a uf = i, so 
has order 6 and the Jacobian of some twist of C lies in -4(o, g ) by Proposition 113.41 
If £ is a primitive cube root of unity, the same computation shows that the 
automorphism u a u has order 3, so the Jacobian of some twist of C lies in Am—gy 

□ 

The isogeny class A(n,-2q)- F° r this case, we found it simplest to use a direct 
construction involving Kani's result (Theorem 13. ip combined with Galois descent. 

Let F be an elliptic curve over F g 2 whose g 2 -Frobenius is equal to q, and let 
be its Galois conjugate over ¥ q . The g 2 -Frobenius acts as the identity on 
the 2-torsion points of E, so all of the 2-torsion points of F are rational over F ? 2. 
Label the nonzero 2-torsion points P, Q, and i?, and let P^ q \ Q^ q \ and be 
the corresponding points on F^ . 

We can easily produce four maximal isotropic subgroups of (F x F^)[2] that 
are stable under the action of the Galois group of ¥ q 2 over ¥ q : 

{(0,0),(P,PMUQ,QM),(R,RM)}, 
{(0,0),{P,pM),(Q,RM),(R,Qto)}, 
{(0,0),(P,rW),(Q,QM),(R,pM)}, 
{(0,0), (P,Q^),(Q,PM),(R,R^)}. 

These are the graphs of certain anti-isometries F[2] — > F^[2\. But the number of 
reducible geometric anti-isometries from F to F^ is equal to half of the number of 
geometric isomorphisms from F to F^ g ) , and since we are in characteristic greater 
than 3, there are at most 6 such isomorphisms. Therefore, at least one of the 
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subgroups G listed above comes from an irreducible anti-isometry, and so there is 
a curve C over ¥ q 2 whose Jacobian is isomorphic to (F x F^)/G. Clearly the 
polarized Jacobian of C is isomorphic to its Galois conjugate, so C can be defined 
over Fq. Furthermore, the isogeny Jac C F 2 -> F x FW descends to give an isogeny 
from Jac C to the restriction of scalars of E. It follows that Jac C lies in the isogeny 
class A(Q-2 q ). □ 

The isogeny classes -4(o,o) when p ^ 1 mod 4. We require two separate arguments 
for this case, one when p = 7 mod 8 and one when p = 3 mod 8. 

First suppose that p = 7 mod 8. Let C be the curve y 2 — x 5 — x. By [IK086, 
Prop. 1.12] and IK086, Rem. 1.4] we see that the Jacobian J of C is fc-isogenous 
to the product of two supersingular curves. Let £ € K be a primitive eighth root 
of unity, and let u be the fC-automorphism 

(a,y) !-> (C 2 /z,(v/z 3 ) 

of C. One checks easily that (u a u){x,y) — (~x,( 2 y), so that has order 4 in 
Aut^-(C). Proposition 113.41 then shows that the Jacobian of some twist of C lies 
in -4(o,o) • 

Now we turn to the case p = 3 mod 8. Let E be the supersingular elliptic curve 
y 2 = x 3 + x, let i be the geometric automorphism (x, y) t— > (— x, \J—1 y) of E, and 
let a be the automorphism 

"0 l" 

i 

of E x E. Note that a a a has order 4 in Aut/f(i? x E), so there is a cocycle 
from Gal(A"/fc) to Aut^i? x E) that sends a to a. Let A be the twist of E x E 
corresponding to the cohomology class in 

H 1 (Gal(K/ k) , Autft- (E x E)) 

that contains this cocycle . 

Let 7r and tta be the g-power Frobenius endomorphisms of E x E and 4, respec- 
tively. Checking the list of supersingular isogeny classes over odd-degree extensions 
of finite prime fields of characteristic at least 7 (see . MN0 2, Thm. 2.9] or the Ap- 
pendix), we see that the characteristic polynomial of it a is x A + bx 2 + q 2 , for some 
integer b. Let / : E x E — ► A be a geometric isomorphism such that a = / _1 / <T . 
The pullback of tta by / is an, so an also has characteristic polynomial x +bx 2 +q 2 . 
From the equalities 

tt 2 — —q, a a n — na, and {aa a ) 2 — —1, 

we see that we must have b = 0, so A lies in the isogeny class -4(o,oV 

Lemma 113.51 below shows that there are positive integers r and s such that 
pr 2 — 2s 2 = 1 . Let H be the AT-cndomorphism of E x E given by 

pr s(l + i)n 

-S7r(l — i) pr 

and let A = \$H be the corresponding degree-p 2 polarization on E x E, where Ao 
is the product principal polarization on E x E. One checks easily that 

H = a^H a a, 

where x i— > a;^ is the Rosati involution on End^(_B x E) corresponding to the 
polarization Ao, that is, the conjugate-transpose involution. Arguing as in the 



H 



€ A n ^ r ^ nc 
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proof of Proposition 112. 4[ we see that A descends to a polarization on A defined 
over k. 

To complete the proof, we need only find a /c-rational a p -subgroup G of A such 
that a(A/G) = 1, for then A will descend to A/G by Proposition 111.91 and the 
geometrically non-split principally polarized surface (A/G, A) will be a Jacobian. 

By Propositions 111.11 and 112.21 (which is equally valid for q nonsquare) we need 
only find [i : j] S P x (if) \ P 1 ^ 2 ) such that [i : j) = a[i a : j a ]. Arguing as in the 
proof of Proposition 112. 3[ we see that this is always possible if q > p 2 . Finally, if 
q = p not all of the q + 1 solutions to [i : j] = o^F : j a ] can be defined over F p 2; 
in fact, these solutions are fixed points of a CT a, and this transformation would be 
the identity on P 1 (F p 2). Since a a a € Aut(iJ), this would imply a a a = ±1 by 
Proposition 1 11. 51 in contradiction with the condition (a" a) 2 = — 1. □ 

Lemma 13.5. Let p be a prime that is congruent to 3 modulo 8. Then there are 
positive integers r and s such that pr 2 — 2s 2 = 1. 

Proof. Let F = Q(y/2p), and let p be the prime ideal of F lying over p. Genus 
theory shows that the class number of F is odd, and since p 2 = (p) is principal, we 
find that p is principal as well, say p = (t + s^/2p) for integers t and s that we may 
take to be positive. Then we have t 2 — 2ps 2 = ±p, so t must be a multiple of p, say 
t = pr. We see that then pr 2 — 2s 2 = ±1. Considering this equation modulo 8, we 
find that in fact we must have pr 2 — 2s 2 = 1. □ 

14. Appendix 

For the sake of completeness we outline a step-by-step procedure that can be used 
to check whether a given monic quartic polynomial / G Z[a;] is the Weil polynomial 
of a smooth projective genus-2 curve over a finite field ¥ q . Our main theorem 
tells when the Weil polynomial for an abelian surface is the Weil polynomial for a 
Jacobian, so mostly what we must do is identify the Weil polynomials of abelian 
surfaces. This has been done in other papers ( |Ruc90j and [MN02] for example); 
we are simply restating these results in a convenient form. 

Write q — p m for a prime p. 

• Step 1 : Check whether f has the right shape for a Weil polynomial. The 
complex roots of the Weil polynomial of an abelian variety over F g have 
magnitude y/q and come in complex conjugate pairs. A monic quartic 
polynomial in Z[x] has this property if and only if it has the shape 

f = + ax 3 + bx 2 + qax + q 2 , 

with 

a 2 

\a\<As/q and 2\a\^/q - 2q < b < — + 2q. 

• Step 2: Check whether f is the Weil polynomial of an abelian surface. 
Suppose / meets the condition of Step 1, and let 

A = a 2 - 4(6 - 2 9 ) and 6 = {b + 2q) 2 - Aqa 2 . 

— Ordinary case: v p (b) = 0. 

In this case the polynomial / is the Weil polynomial of an ordinary 
abelian surface over ¥ q . The surface is split or simple according to A 
being a square in Z or not. 
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— Mixed case: v p (a) — and v p (b) > 0. 

The polynomial / is the Weil polynomial of a mixed abelian surface if 
and only if 

v p (b) > m/2 and 5 is either or a non-square in Z p . 

The surface is split or simple according to A being a square in Z or 
not. 

— Supersingular case: v p (a) > and v p (b) > 0. 

The polynomial / is the Weil polynomial of a supersingular split 
abelian surface if and only if 

v p (a) > to/2, v p (b) > to, and A is a square in Z, 

and moreover, if q is a square and we write a = ^fqa! and b = qb' , the 
following two conditions hold: 

p 1 mod 4, if b' = 2, 

p ^ 1 mod 3, if a' ^ b' mod 2. 

The polynomial / is the Weil polynomial of a simple supersingular 
abelian surface if and only if (a, b) belongs to the following list : 



(a,b) 


Conditions on p and (7 


(0,0) 


(7 is a square and p ^ 1 mod 8, or 
g is not a square and 2 




(7 is a square and p ^ 1 mod 12, or 
g is not a square and p 7^ 3 


(o,<?) 


q is not a square 


(0,-2*7) 


q is not a square 


(0,2(7) 


q is a square and p = 1 mod 4 


(±V9»<?) 


(7 is a square and p ^ 1 mod 5 


(±V2g,<z) 


<7 is not a square and p = 2 


(±2^,3*7) 


<7 is a square and p = 1 mod 3 


(±V5^,3g) 


q is not a square and p = 5 



• Siep 5: Apply Theorem \1.2\ If / is the Weil polynomial of an abelian surface 
over F q , one applies Theorem ll.2l to determine if it is the Weil polynomial 
of a genus-2 curve. Note that in the split case, A is a square in Z and the 
polynomial x 2 + ax + (b — 2q) has two roots s, t £ Z, which are the traces 
of Frobenius of the corresponding elliptic curves. 

References 

Gerard van der Geer and Marcel van der Vlugt: Reed-Muller codes and super- 
singular curves. I. Compositio Math. 84 (1992) 333-367. 

Josep Gonzalez, Jordi Guardia, and Victor Rotger: Abelian surfaces of GL2- 
type as Jacobians of curves, Acta Arith. 116 (2005) 263-287. 

Ki-ichiro Hashimoto and Tomoyoshi Ibukiyama: On class numbers of positive 
definite binary quaternion Hermitian forms. I, II, III. J. Fac. Sci. Univ. Tokyo Sect. 
IA Math. 27 (1980) 549-601, 28 (1981) 695-699, 30 (1983) 393-401. 
Detlev W. Hoffmann: On positive definite Hermitian forms, Manuscripta Math. 71 
(1991) 399-429. 



JACOBIANS IN ISOGENY CLASSES 



37 



[How95] Everett W. Howe: Principally polarized ordinary abelian varieties over finite fields, 
Trans. Amer. Math. Soc. 347 (1995) 2361-2401. 

[How96] Everett W. Howe: Kernels of polarizations of abelian varieties over finite fields, J. 
Algebraic Geom. 5 (1996) 583-608. 

[HowOl] Everett W. Howe: Isogeny classes of abelian varieties with no principal polariza- 
tions, pp. 203-216 in: Moduli of abelian varieties (C. Faber, G. van der Geer and F. 
Oort, eds.), Progr. Math. 195, Birkhiiuser, Basel, 2001. 

[How04] Everett W. Howe: On the non-existence of certain curves of genus two, Compos. 
Math. 140 (2004) 581-592. 

[How06] Everett W. Howe: Supersingular genus-two curves over fields of characteristic three, 
arXiv:math/0604413vl [math . NT] . 

[HL03] E.W. Howe and K.E. Lauter: Improved upper bounds for the number of points on 
curves over finite fields, Ann. Inst. Fourier (Grenoble) 53 (2003) 1677-1737. 

[HLP00] Everett W. Howe, Franck Leprevost, and Bjorn Poonen: Large torsion sub- 
groups of split Jacobians of curves of genus two or three, Forum Math. 12 (2000) 
315-364. 

[HMNR06] Everett W. Howe, D. Maisner, E. Nart, and C. Ritzenthaler: Principally po- 
larizable isogeny classes of abelian surfaces over finite fields, arXiv: math/0602650 vl 
[math . NT] . 

[Ibu89] TOMOYOSHI IbukiyamA: On automorphism groups of positive definite binary quater- 
nion Hermitian lattices and new mass formula, pp. 301-349 in: Automorphic forms 
and geometry of arithmetic varieties (K. Hashimoto and Y. Namikawa, eds.), Adv. 
Stud. Pure Math. 15, Academic Press, Boston, MA, 1989. 

[IKO86] Tomoyoshi Ibukiyama, Toshiyuki Katsura, and Frans Oort: Supersingular 
curves of genus two and class numbers, Compositio Math. 57 (1986) 127—152. 

[Igu60] Jun-ichi IGUSA: Arithmetic variety of moduli for genus two, Ann. of Math. (2) 72 
(1960) 612-649. 

[Ito90] Hideji ItO: On the number of rational cyclic subgroups of elliptic curves over finite 
fields, Mem. College Ed. Akita Univ. Natur. Sci. No. 41 (1990) 33-42. 

[Kan97] Ernst Kani: The number of curves of genus two with elliptic differentials, J. Reine 
Angew. Math. 485 (1997) 93-121. 

[KOS7] Toshiyuki Katsura and Frans Oort: Families of supersingular abelian surfaces, 
Compositio Math. 62 (1987) 107-167. 

[LauOO] Kristin Lauter: Non-existence of a curve over F3 of genus 5 with 14 rational points, 
Proc. Amer. Math. Soc. 128 (2000), 369-374. 

[Lau02] Kristin Lauter with an appendix by Jean-Pierre Serre: The maximum or min- 
imum number of rational points on genus three curves over finite fields, Compositio 
Math. 134 (2002) 87-111. 

[Mai04] Daniel Maisner, Superficies abelianas como jacobianas de curvas en cuerpos finitos, 
thesis, Universitat Autonoma de Barcelona, 2004. 

[MN02] Daniel Maisner and Enric Nart with an appendix by Everett W. Howe: 
Abelian surfaces over finite fields as Jacobians, Experiment. Math. 11 (2002) 321- 
337. 

[MN07] Daniel Maisner and Enric Nart: Zeta functions of supersingular curves of genus 2, 

Canad. J. Math. 59 (2007) 372-392. 
[MV05] Gary McGuire and Jose Felipe Voloch: Weights in codes and genus 2 curves, 

Proc. Amer. Math. Soc. 133 (2005) 2429-2437. 
[Mil86] J.S. Milne: Abelian varieties, pp. 103-150 in: Arithmetic geometry (G. Cornell and 

J. H. Silverman, eds.), Springer- Verlag, New York, 1986. 
[Oda69] Tadao OdA: The first de Rham cohomology group and Dieudonne modules, Ann. 

Sci. Ecole Norm. Sup. (4) 2 (1969) 63-135. 
[Oor75] Frans Oort: Which abelian surfaces are products of elliptic curves?, Math. Ann. 214 

(1975) 35-47. 

[Rei03] I. Reiner: Maximal orders (corrected reprint of the 1975 original), London Math. 

Soc. Monogr. (N.S.) 28, The Clarendon Press, Oxford University Press, Oxford, 2003. 

[Riic90] Hans-Georg Ruck: Abelian surfaces and Jacobian varieties over finite fields, Com- 
positio Math. 76 (1990) 351-366. 



38 



EVERETT W. HOWE, ENRIC NART, AND CHRISTOPHE RITZENTHALER 



[Sch87] Rene Schoof: Nonsingular plane cubic curves over finite fields, J. Combin. Theory 

Ser. A 46 (1987) 183-211. 
[Scr94] Jean-Pierre Serre: Cohomologie Galoisienne (fifth edition), Lecture Notes in 

Math. 5, Springer- Verlag, Berlin, 1994. 
[Shi63] G0R.0 Shimura: Arithmetic of alternating forms and quaternion hermitian forms, J. 

Math. Soc. Japan 15 (1963) 33-65. 
[Tat66] John Tate: Endomorphisms of abelian varieties over finite fields, Invent. Math. 2 

(1966) 134-144. 

[Tat68] John Tate: Classes d'isogenie des varietes abeliennes sur un corps fini (d'apres T. 

Honda), Exp. 352, pp. 95-110 in: Seminaire Bourbaki vol. 1968/69 Exposes 347-363, 
Lecture Notes in Math. 179, Springer- Verlag, Berlin-New York, 1971. 

[Wat69] William C. Waterhouse: Abelian varieties over finite fields, Ann. Sci. Ecole Norm. 
Sup. (4) 2 (1969) 521-560. 

Center for Communications Research, 4320 Westerra Court, San Diego, CA 92121- 
1967, USA. 

E-mail address: howeverOalumni.caltech.edu 
URL: http: //www. alumni . caltech.edu/~however/ 

Departament de Matematiques, Universitat Autonoma de Barcelona, Edifici C, 08193 
Bellaterra, Barcelona, Spain. 
E-mail address: nart@mat.uab.es 

Institut de Mathematiques de Luminy, UMR 6206 du CNRS, Luminy, Case 907, 13288 
Marseille, France. 

E-mail address: ritzenth@iml.univ-mrs.fr 



